git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2014-12-28T00:00:00

Updated: 2024-08-06T16:52:27.072Z

Reserved: 2013-06-24T00:00:00

Link: CVE-2013-4663

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-12-28T00:59:02.753

Modified: 2024-11-21T01:56:01.120

Link: CVE-2013-4663

cve-icon Redhat

No data.