Nginx exposes Git configuration

Sigma-Production / ptero-eggs

Nginx egg Host your Website on pterodactyl panel

Other

72 stars 91 forks source link

Nginx exposes Git configuration #57

Open Miautier opened 9 months ago

Miautier commented 9 months ago

The automated created file /.git/config ist exposed to the internet and can be accessed through the browser. The GIT login name and the access token can thus be read out in plain text.

ka0un commented 2 weeks ago

yeah, I just realized this is a huge venerability and it could leak your private git repository.