CVE-2013-4663

Name of the Vulnerable Software and Affected Versions Redmine plugin redmine git hosting (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters. This can be achieved in two ways: (1) by injecting shell metacharacters in the service parameter to the "info/refs" API endpoint, related to the get info refs function, or (2) by injecting shell metacharacters in the reqfile argument to the file exists function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.