Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:git-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductGit Server (e8eb3824-ee71-51e6-beb3-53679169c0ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9708 vulnerable 2026-06-08 05:28:02.648127 GHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath function
MEDIUM (5.9)
The resolveRepositoryPath function doesn't properly validate user input and a malicious user may traverse to any valid Git repository outside the repoRoot. This issue may lead to unauthorized access of private Git repositories as long as the malicious user knows or brute-forces the location of the repository.
Published: 2020-08-14T16:48:30.769Z
Updated: 2024-09-16T16:43:25.441Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.