CVE-2011-1572: Gitolite

Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

Affected products

• Gitolite Gitolite: up to and including 1.5.9; version 0.50 only; version 0.55 only; version 0.60 only; version 0.65 only; version 0.70 only; …

Published 2011-10-04. Last modified 2026-06-16.