chiliproject/chiliproject — pull request #189 by maddingo (2012-04-27 13:34:10+00:00)
Title: The change fixes a serious vulnerability in the git repository code

The vulnerability can be exposed by using this URL:
http://CHILIHOST/projects/MYPROJECT/repository/changes?git_url_text=&branch=master&rev=master||echo+AAA+>/tmp/aa.txt &

The code can create files as the git user running chiliproject.