Description
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 3.0.0-beta can resolve this issue. The patch is named f67609d52c1812fa8a7ed80eae5e795cfd72115f. It is advisable to upgrade the affected component.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
klaussilveira GitList
2.0.0affected3.0.0-betaunaffected
References
- https://vuldb.com/vuln/397168 ↗
- https://vuldb.com/vuln/397168/cti ↗
- https://vuldb.com/cve/CVE-2026-82669 ↗
- https://vuldb.com/submit/893867 ↗
- https://github.com/klaussilveira/gitlist/issues/948 ↗
- https://github.com/klaussilveira/gitlist/commit/f67609d52c1812fa8a7ed80eae5e795cfd72115f ↗
- https://github.com/klaussilveira/gitlist/releases/tag/3.0.0-beta ↗
- https://github.com/klaussilveira/gitlist/ ↗