CVE-2013-7392: Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to So...

Security readout for executives and security teams

CVE-2013-7392 is a reported remote command execution flaw in Gitlist. A crafted filename containing shell metacharacters could cause commands to run through the Source view. Public source data does not identify affected versions, a CVSS score, or a vendor-named fix. Exposure is most likely on internet- or intranet-facing Gitlist deployments, especially where repositories contain files created by untrusted contributors or imported from untrusted sources. Prioritize externally reachable Gitlist instances because the reported impact is arbitrary command execution. Business urgency depends on whether Gitlist is deployed and whether attackers can influence served repository contents. Mitigation focus: Inventory all Gitlist instances and identify any public exposure.; Check the GitHub issue and vendor guidance for fixed or safe versions.; Restrict Gitlist access behind authentication or network controls..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.