CVE-2010-2447

CRITICAL

gitolite < 1.4.1 - Path Traversal via Unfiltered src/ and hooks/ Paths

Title source: llm

gitolite before 1.4.1 does not filter src/ or hooks/ from path names.

Core 5

Core References

Third Party Advisory x_refsource_misc

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

Patch x_refsource_confirm

Patch x_refsource_confirm

Third Party Advisory x_refsource_confirm

CVSS v3 9.8

EPSS 0.0176

EPSS Percentile 75.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20

Status published

Products (1)

gitolite/gitolite < 1.4.1

Published Nov 07, 2019

Tracked Since Feb 18, 2026