git-cve-2017-8386
by selfmade · built
A flaw was found in the way git-shell handled command-line options for the restricted set of git-shell commands. A remote, authenticated attacker could use this flaw to bypass git-shell restrictions, to view and manipulate files, by abusing the instance of the less command launched using crafted command-line options. CVE 2017-8386.
Install on your instance
Open LabStore on any connected Selfmade Ninja Labs instance and press Get on git-cve-2017-8386 — or, from the instance shell:
labsctl store-install git-cve-2017-8386