Gitolite: >> Gitolite >> 3.6.10 Security Vulnerabilities
commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.
CVSS Score
8.1
EPSS Score
0.005
Published
2019-01-10