CVE-2018-5955

Name of the Vulnerable Software and Affected Versions: GitStack versions prior to 2.3.10

Description: An issue was discovered where user-controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the "rest/user/" endpoint using the username and password fields.

Recommendations: For versions prior to 2.3.10, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the "rest/user/" endpoint to minimize the risk of exploitation. Avoid using the username and password fields in the affected endpoint until the issue is resolved.