CVE-2013-4663 | BDVDB-2026-67018 Detail

Description#

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.sec-1.com/blog/2013/redmine-git-hosting-plugin-remote-command-execution

Exploit#

No public exploit known

History#

Version 12014-12-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.