This Metasploit module exploits a directory traversal vulnerability in cgit versions prior to 1.2.1.
a6e005dc2280ba56fb5c4225445c65d8851f8cf8775107d49d6da21b41b8d918
cgit suffers from a directory traversal vulnerability in cgit_clone_objects().
37831299c41cbf8b4276c28e94d3615148e9fe86404363c2b69eae6eba250c7c