NVD

Id
45924  
Name
CVE-2012-4548  
Description
Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-11  
Modified Date
2013-04-10  
Seq
2012-4548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230714 45924 CVE-2012-4548 http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd  View
230715 45924 CVE-2012-4548 openSUSE-SU-2012:1421  View
230716 45924 CVE-2012-4548 openSUSE-SU-2012:1422  View
230717 45924 CVE-2012-4548 openSUSE-SU-2012:1460  View
230718 45924 CVE-2012-4548 openSUSE-SU-2012:1461  View
230719 45924 CVE-2012-4548 [oss-security] 20121027 CVE Request: cgit command injection  View
230720 45924 CVE-2012-4548 [oss-security] 20121028 Re: CVE Request: cgit command injection  View
230721 45924 CVE-2012-4548 56315  View
230722 45924 CVE-2012-4548 cgit-syntaxhighlighting-command-exec(79665)  View
230723 45924 CVE-2012-4548 https://bugzilla.redhat.com/show_bug.cgi?id=870713  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29606 JVNDB-2012-005313 cgit の syntax-highlighting.sh における任意のコマンドを実行される脆弱性 cgit の syntax-highlighting.sh には、引数の挿入により、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-4548 57786 CVE-2012-4548 45924 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005313.html 2012-10-28 2012-12-07 View