.. / CVE-2018-14912

• LFI
• Nuclei
• Web

Exploit for cgit < 1.2.1 - Directory Traversal (CVE-2018-14912)

Description:

cGit < 1.2.1 via cgit_clone_objects has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.

Nuclei Template

View the template here CVE-2018-14912.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-14912.yaml

References: