CVE-2020-9708

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned

Description The issue arises from the resolveRepositoryPath function's failure to properly validate user input. This allows a malicious user to potentially traverse to any valid Git repository outside the repoRoot, leading to unauthorized access of private Git repositories if the malicious user knows or brute-forces the location of the repository.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.