Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint.

This update of cgit fixes a XSS vulnerability. CVE-2011-2711: CVSS v2 Base Score: 3.3 (AV:N/AC:L/Au:M/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79)

This update fixes a potential XSS vulnerability. A malicious user would need push access to the git server in order to exploit this issue. Refer to the cgit mailing list for :

Numerous minor bugs are also fixed. For details, refer to the upstream release announcements for 0.9.0.1 and 0.9.0.2.

http://hjemli.net/pipermail/cgit/2011-July/000276.html http://hjemli.net/pipermail/cgit/2011-June/000183.html http://hjemli.net/pipermail/cgit/2011-July/000273.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75797	openSUSE Security Update : cgit (openSUSE-SU-2011:0891-1)	Nessus	SuSE Local Security Checks	low
55876	Fedora 15 : cgit-0.9.0.2-2.fc15 (2011-9589)	Nessus	Fedora Local Security Checks	low
55875	Fedora 14 : cgit-0.9.0.2-2.fc14 (2011-9588)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2011-2711

medium

Tenable Plugins

low

low

low