PatchTheCVEbonobo git server vulnerabilities and fixes
Recent CVEs affecting bonobo git server, with upgrade or downgrade steps. 2 tracked.
Also searched as: bonobogitserver.
bonobo git server has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-04-24. Highest priority: CVE-2019-11217 (score 62/100).
- CVE-2019-11218 HIGH 8.8 UPGRADE Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo
- CVE-2019-11217 CRITICAL 9.8 UPGRADE The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in
FAQ
How do I fix bonobo git server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bonobo git server being exploited right now?
None of the tracked bonobo git server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bonobo git server CVE should I patch first?
CVE-2019-11217 currently ranks highest (62/100): The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in.