Unrated severityNVD Advisory· Published Nov 11, 2012· Updated Apr 29, 2026
CVE-2012-4548
CVE-2012-4548
Description
Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.
Affected products
28cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*range: <=0.9.0.3
- cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.9.0.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- secunia.com/advisories/50734nvdVendor Advisory
- secunia.com/advisories/51167nvdVendor Advisory
- git.zx2c4.com/cgit/commit/nvd
- lists.opensuse.org/opensuse-security-announce/2012-10/msg00021.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-10/msg00022.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-11/msg00003.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-11/msg00004.htmlnvd
- secunia.com/advisories/51222nvd
- www.openwall.com/lists/oss-security/2012/10/28/1nvd
- www.openwall.com/lists/oss-security/2012/10/28/2nvd
- www.securityfocus.com/bid/56315nvd
- bugzilla.redhat.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/79665nvd
News mentions
0No linked articles in our index yet.