cgit is prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal strings to retrieve arbitrary files outside of the server root directory. This may aid in further attacks.

Updates are available. Please see the references or vendor advisory for more information.

• http://www.securityfocus.com/bid/60164

---

Updated on 2017-03-28