Security Advisory

CVE-2013-4663

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-12-28 00:00:00

Last updated 2024-08-06 16:52:27

Assigner mitre

State PUBLISHED

Description

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.

← Browse all CVEs View on cve.org ↗