PT-2025-35199 · Gitblit · Gitblit

Published 2025-08-29 · Updated 2025-09-02 · CVE-2024-28080

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Gitblit (affected versions not specified)

Description This issue is an authentication bypass vulnerability in Gitblit, an open-source Java stack for managing Git repositories. The vulnerability involves exploiting opportunities within the MINA SSHd host applications, potentially leading to side effects. The ServerSession object is a key parameter in the vulnerable function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-28080

Affected Products

Gitblit

References · 9

• https://t.me/thebugbountyhunter/10165 · Telegram Post
• https://twitter.com/secharvesterx/status/1961353221785464870 · Twitter Post
• https://t.me/secharvester/19979 · Telegram Post
• https://t.me/RNetsec/21934 · Telegram Post
• https://twitter.com/_r_netsec/status/1961345097804792310 · Twitter Post
• https://twitter.com/CrowdCyber_Com/status/1961944713692365030 · Twitter Post
• https://twitter.com/infosecindustry/status/1961465043909808585 · Twitter Post
• https://t.me/defcon_news/131684 · Telegram Post
• https://twitter.com/bigmacd16684/status/1962899851001118977 · Twitter Post