CVE-2012-4548: Command Injection
Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.
Other sources
syntax-highlighting.sh: Fix command injection.
By not quoting the argument, an attacker with the ability to add files to the repository could pass arbitrary arguments to the highlight command, in particular, the --plug-in argument which can lead to arbitrary command execution.
This patch adds simple argument quoting.
External references: http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4548?
CVE-2012-4548 has a medium severity rating due to the potential for authenticated users to execute arbitrary commands.
How do I fix CVE-2012-4548?
To fix CVE-2012-4548, update to a version of cgit that is later than 0.9.0.3 or apply the patch provided in the official commit.
Who is affected by CVE-2012-4548?
CVE-2012-4548 affects users of cgit versions 0.9.0.3 and earlier that allow file additions by remote authenticated users.
What type of vulnerability is CVE-2012-4548?
CVE-2012-4548 is an argument injection vulnerability related to command execution via the highlight command.
Can CVE-2012-4548 be exploited remotely?
Yes, CVE-2012-4548 can be exploited by remote authenticated users with permissions to add files.