CVE-2022-42968 : Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Argume

Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.

Published 2022-10-16 04:15:09

Updated 2022-12-03 01:35:07

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-42968

Gitea » Gitea
Versions before (<) 1.17.3
cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 59 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

Assigned by: nvd@nist.gov (Primary)

https://security.gentoo.org/glsa/202210-14

Gitea: Multiple Vulnerabilities (GLSA 202210-14) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://github.com/go-gitea/gitea/releases/tag/v1.17.3

Release v1.17.3 · go-gitea/gitea · GitHub
Release Notes;Third Party Advisory
https://github.com/go-gitea/gitea/pull/21463

Sanitize and Escape refs in git backend (#21464) by 6543 · Pull Request #21463 · go-gitea/gitea · GitHub
Patch;Third Party Advisory

Jump to