CVE-2010-2447

gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
Source: NIST
CVE-2010-2447