Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gitolite 安全漏洞
Vulnerability Description
Gitolite是Sitaram Chamarty程序员所研发的一套基于Perl语言的Git服务管理工具。该工具使用公钥对用户进行认证，并支持通过配置文件对写操作进行基于分支和路径的授权。 Gitolite commit fa06a34版本至3.5.3版本中存在安全漏洞。本地攻击者可利用该漏洞覆盖任意文件，可导致提升权限。
CVSS Information
N/A
Vulnerability Type
N/A