Описание
Gitea vulnerable to Argument Injection
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
Пакеты
Наименование
github.com/go-gitea/gitea
go
Затронутые версииВерсия исправления
< 1.17.3
1.17.3
Связанные уязвимости
CVSS3: 9.8
redhat
около 4 лет назад
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
CVSS3: 9.8
nvd
около 4 лет назад
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
CVSS3: 9.8
debian
около 4 лет назад
Gitea before 1.17.3 does not sanitize and escape refs in the git backe ...
CVSS3: 9.8
altlinux
около 4 лет назад
ALT-PU-2022-2880: package `gitea` update to version 1.17.3-alt1
CVSS3: 9.8
altlinux
около 4 лет назад
ALT-PU-2022-2947: package `gitea` update to version 1.17.3-alt1