CVE-2008-5517: Git

High severity, CVSS 7.5. EPSS: 11.9% chance of exploitation in the next 30 days.

The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.

Affected products

• Git Git: version 1.5.0 only; version 1.5.0.1 only; version 1.5.0.2 only; version 1.5.0.3 only; version 1.5.0.4 only; version 1.5.0.5 only; …

Published 2009-01-13. Last modified 2026-06-16.