CVE-2008-5516

no score yetEPSS 4.4%

The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-264
Published: 2009-01-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

git-scm:git
git:git

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html
http://repo.or.cz/w/git.git?a=commitdiff%3Bh=c582abae
http://secunia.com/advisories/33964
http://secunia.com/advisories/34194

Check your stack JSON