Description
Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cgit | 1.0-1.3 | openSUSE-SU-2024:10137-1 |
Advisories 1
- openSUSE-SU-2024:10137-1 cgit-1.0-1.3 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- [oss-security] 20110724 Re: Re: CVE Request -- cGit -- XSS flaw in rename hint mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=725042
- 48866 vdb-entry
- [oss-security] 20110724 Re: Re: CVE Request -- cGit -- XSS flaw in rename hint mailing-list
- [oss-security] 20110722 Re: CVE Request -- cGit -- XSS flaw in rename hint mailing-list
- http://hjemli.net/git/cgit/commit/?h=stable&id=bebe89d7c11a92bf206bf6e528c51ffa8ecbc0d5
- openSUSE-SU-2011:0891 vendor-advisory
- 74050 vdb-entry
- [oss-security] 20110722 CVE Request -- cGit -- XSS flaw in rename hint mailing-list
- 45358 third-party-advisory
- [oss-security] 20110722 Re: CVE Request -- cGit -- XSS flaw in rename hint mailing-list
- 45541 third-party-advisory
- cgit-renamehint-xss(68754) vdb-entry
- [cgit] 20110722 [PATCH] Fix potential XSS vulnerability in rename hint mailing-list