CVE-2020-9708

CVE-2020-9708 is a path traversal vulnerability affecting Adobe Git-Server, where insufficient user input validation in the resolveRepositoryPath function allows attackers to access private Git repositories outside the intended root directory. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network without authentication, potentially leading to unauthorized disclosure of sensitive data. While the vulnerability is not listed on the KEV catalog and lacks public exploit intelligence or significant community discussion, its ease of exploitation and high impact warrant attention.