PT-2019-12193 · Bonobo · Bonobo Git Server

Publicado 2019-04-24 · Atualizado 2019-04-25 · CVE-2019-11217

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bonobo Git Server versions prior to 6.5.0

Description The issue allows execution of arbitrary commands in the context of the web server via a crafted HTTP request. This is due to a problem in the GitController.

Recommendations For versions prior to 6.5.0, update to version 6.5.0 or later to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2019-11217

Produtos afetados

Bonobo Git Server

Referências · 4

• https://bonobogitserver.com/changelog/#version-650 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11217 · Nota de Segurança
• https://flab.cesnet.cz/advisories/cve-2019-11217 · Correção
• https://osv.dev/vulnerability/CVE-2019-11217 · Aviso do Fabricante