Vulnerabilities

TI-2019-08395 CVE-2019-11218 · GHSA-8w85-7w79-ghh7

Improper handling of extra parameters in the AccountController (User Profile edit) in…

MEDIUM 40

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01159 Published 2019-04-24 No fix listed CWE-20

TI-2019-08394 CVE-2019-11217 · GHSA-v3f5-vpvp-mfhx

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of…

MEDIUM 49

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03798 Published 2019-04-24 No fix listed CWE-77

Vulnerabilities

Filters

Improper handling of extra parameters in the AccountController (User Profile edit) in…

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of…