VulnerabilityModified
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
MEDIUM 5.5EPSS 0.42%
Does this matter?
Lower severity and a low EPSS score (0.42%). Track it; it rarely justifies an emergency change on its own.
Description
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
- CVSS 3.0
- 5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.42% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- gitolite/gitolite
- Source
- security@debian.org
References
- http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.htmlNot Applicable, Third Party Advisory, VDB Entry
- https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.htmlThird Party Advisory
- https://marc.info/?l=oss-security&m=138783069700756&w=2Third Party Advisory
- http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.htmlNot Applicable, Third Party Advisory, VDB Entry
- https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.htmlThird Party Advisory
- https://marc.info/?l=oss-security&m=138783069700756&w=2Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.