7.5

CVE-2018-14912: cgit_project cgit Path Traversal

CVSS: 7.5v3.0HighModified
AliasesALPINE-CVE-2018-14912MGASA-2018-0351UBUNTU-CVE-2018-14912
Published 03-08-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-14912 is a high (CVSS 7.5) Path Traversal vulnerability in cgit_project cgit. EPSS estimates a 91.88% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk
58/100
0100
High · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.0 (NVD)
EPSS score
91.88%
0%100%
Critical · -1.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits3reference, exploit-database, metasploit

Timeline

  1. 03-08-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

91.88%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

-1.00 pp

From 92.88% on 18-09-2026

18-09-202618-10-2026
EPSS score
91.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found
  • referenceUnverified

    Exploit Reference (bugs.chromium.org)

    Maturity: unknown

  • exploit-databaselinuxUnverified

    cgit 1.2.1 - Directory Traversal (Metasploit)

    Maturity: poc

  • MetasploitMetasploitremoteUnverified

    cgit Directory Traversal

    auxiliary/scanner/http/cgit_traversal

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • cgit< 1.1+git2.10.2-3.1 | < 1.1+git2.10.2-3+deb9u1 | < 0.10.2.git2.0.1-3+deb8u2
  • debian_linuxEOL8.0 | 9.0
Alpine1 product
  • cgit< 1.0-r2 | < 1.1-r2 | < 1.1-r3 | < 1.1-r4
Cgit_project1 product
Mageia1 product
  • cgit< 0.12-3.1.mga6
Opensuse1 product
  • cgit&distro=openSUSE Tumbleweed< 1.2.3-1.10
Ubuntu1 product
  • cgit< 1.1+git2.10.2-3ubuntu0.1 | < 0.11.2.git2.3.2-1.1ubuntu0.1~esm1

6 vendors · 7 products

References

14 links
Show all 14 references