Critical severity9.8NVD Advisory· Published Sep 21, 2018· Updated Jun 16, 2026

CVE-2013-4451

Description

gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gitolite/Gitoliteinferred2 versions
>= commit fa06a34, <= 3.5.3+ 1 more
- (no CPE)range: >= commit fa06a34, <= 3.5.3
- (no CPE)range: <3.5.3

Patches

Vulnerability mechanics

References

github.com/sitaramc/gitolite/commit/3dad4f8e3214d6ab5f71823019a624fa48b055a3nvdPatchThird Party Advisory
www.openwall.com/lists/oss-security/2013/10/21/11nvdMailing ListPatch
www.securityfocus.com/bid/63237nvdThird Party AdvisoryVDB Entry
groups.google.com/forum/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000