A security issue has been reported in gitolite, which can be exploited by malicious users to bypass certain security restrictions.
The security issue is caused due to an error within the handling of admin-defined commands (ADC), which can be exploited to execute arbitrary commands with the privileges of the gitolite server via directory traversal attacks.
Successful exploitation requires that ADC commands are enabled ("GL_ADC_PATH" is set in the rc file).
The security issue is reported in versions prior to 1.5.9.1.
