Fluid Attacks Database

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
alpine v3.5	cgit	=0.10-r0 \|\| =0.10.1-r0 \|\| =0.10.2-r0 \|\| =0.10.2-r1 \|\| =0.11.2-r0 \|\| =0.12-r0 \|\| =0.8.2.1-r1 \|\| =0.8.3-r0 \|\| =0.8.3.1-r0 \|\| =0.8.3.1-r1 \|\| =0.8.3.1-r2 \|\| =0.8.3.3-r0 \|\| =0.8.3.4-r0 \|\| =0.9-r0 \|\| =0.9.0.1-r0 \|\| =0.9.0.2-r0 \|\| =0.9.0.2-r1 \|\| =0.9.0.3-r0 \|\| =0.9.1-r0 \|\| =0.9.2-r0 \|\| =0.9.2-r1 \|\| =1.0-r0 \|\| =1.0-r1 \|\| >=0 <1.0-r2	1.0-r2
debian 12	cgit	>=0 <1.1+git2.10.2-3.1	1.1+git2.10.2-3.1
debian 14	cgit	>=0 <1.1+git2.10.2-3.1	1.1+git2.10.2-3.1
alpine v3.6	cgit	=0.10-r0 \|\| =0.10.1-r0 \|\| =0.10.2-r0 \|\| =0.10.2-r1 \|\| =0.11.2-r0 \|\| =0.12-r0 \|\| =0.8.2.1-r1 \|\| =0.8.3-r0 \|\| =0.8.3.1-r0 \|\| =0.8.3.1-r1 \|\| =0.8.3.1-r2 \|\| =0.8.3.3-r0 \|\| =0.8.3.4-r0 \|\| =0.9-r0 \|\| =0.9.0.1-r0 \|\| =0.9.0.2-r0 \|\| =0.9.0.2-r1 \|\| =0.9.0.3-r0 \|\| =0.9.1-r0 \|\| =0.9.2-r0 \|\| =0.9.2-r1 \|\| =1.0-r0 \|\| =1.0-r1 \|\| =1.1-r0 \|\| =1.1-r1 \|\| >=0 <1.1-r2	1.1-r2
alpine v3.7	cgit	=0.10-r0 \|\| =0.10.1-r0 \|\| =0.10.2-r0 \|\| =0.10.2-r1 \|\| =0.11.2-r0 \|\| =0.12-r0 \|\| =0.8.2.1-r1 \|\| =0.8.3-r0 \|\| =0.8.3.1-r0 \|\| =0.8.3.1-r1 \|\| =0.8.3.1-r2 \|\| =0.8.3.3-r0 \|\| =0.8.3.4-r0 \|\| =0.9-r0 \|\| =0.9.0.1-r0 \|\| =0.9.0.2-r0 \|\| =0.9.0.2-r1 \|\| =0.9.0.3-r0 \|\| =0.9.1-r0 \|\| =0.9.2-r0 \|\| =0.9.2-r1 \|\| =1.0-r0 \|\| =1.0-r1 \|\| =1.1-r0 \|\| =1.1-r1 \|\| =1.1-r2 \|\| >=0 <1.1-r3	1.1-r3
alpine v3.8	cgit	=0.10-r0 \|\| =0.10.1-r0 \|\| =0.10.2-r0 \|\| =0.10.2-r1 \|\| =0.11.2-r0 \|\| =0.12-r0 \|\| =0.8.2.1-r1 \|\| =0.8.3-r0 \|\| =0.8.3.1-r0 \|\| =0.8.3.1-r1 \|\| =0.8.3.1-r2 \|\| =0.8.3.3-r0 \|\| =0.8.3.4-r0 \|\| =0.9-r0 \|\| =0.9.0.1-r0 \|\| =0.9.0.2-r0 \|\| =0.9.0.2-r1 \|\| =0.9.0.3-r0 \|\| =0.9.1-r0 \|\| =0.9.2-r0 \|\| =0.9.2-r1 \|\| =1.0-r0 \|\| =1.0-r1 \|\| =1.1-r0 \|\| =1.1-r1 \|\| =1.1-r2 \|\| =1.1-r3 \|\| >=0 <1.1-r4	1.1-r4
debian 11	cgit	>=0 <1.1+git2.10.2-3.1	1.1+git2.10.2-3.1
debian 13	cgit	>=0 <1.1+git2.10.2-3.1	1.1+git2.10.2-3.1
alpm rolling_release	cgit	>=1.2-1 <1.2.1-1	1.2.1-1

Aliases

1. CVE-2018-149122. NVD-2018-149123. OSV-ALPINE-2018-149124. OSV-2018-149125. OSV-DEBIAN-2018-149126. SECURITY-CVE-2018-149127. SECURITY-TRACKER-CVE-2018-14912

References

1. https://vulncheck.com/cve/CVE-2018-149122. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14912.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.