CVE-2018-5955: Smartmobilesoftware Gitstack

Critical severity, CVSS 9.8. EPSS: 81.4% chance of exploitation in the next 30 days.

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.

Affected products

• Smartmobilesoftware Gitstack: up to and including 2.3.10

Published 2018-01-21. Last modified 2026-06-17.