Gitness LFS 需授权 路径遍历漏洞 可导致远程代码执行

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-58158
• https://github.com/harness/harness/security/advisories/GHSA-w469-hj2f-jpr5
• https://www.anquanke.com/post/id/311771
• https://securityonline.info/cve-2025-58158-flaw-in-harness-gitness-allows-arbitrary-file-write/
• https://www.ameeba.com/blog/cve-2025-58158-harness-open-source-git-lfs-server-vulnerability/
• https://cve.imfht.com/detail/CVE-2025-58158?lang=en
• https://github.com/harness/harness/commit/21c5ce42ae13740b1cad47706c2ec85e72cc8c20

Related Vulnerabilities

• PoCgitness-default-login: Gitness - Default Login