CVE-2022-30781

Опубликовано: 16 мая 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Высокий

Описание

Gitea before 1.16.7 does not escape git fetch remote.

Ссылки

http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://blog.gitea.io/2022/05/gitea-1.16.7-is-released/
Release Notes
Vendor Advisory
https://github.com/go-gitea/gitea/pull/19487
Patch
Third Party Advisory
https://github.com/go-gitea/gitea/pull/19490
Patch
Third Party Advisory
http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://blog.gitea.io/2022/05/gitea-1.16.7-is-released/
Release Notes
Vendor Advisory
https://github.com/go-gitea/gitea/pull/19487
Patch
Third Party Advisory
https://github.com/go-gitea/gitea/pull/19490
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*

Версия до 1.16.7 (исключая)

EPSS

Процентиль: 100%

0.8793

Высокий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-116

Связанные уязвимости

CVE-2022-30781

CVSS3: 7.5

debian

больше 4 лет назад

Gitea before 1.16.7 does not escape git fetch remote.

GHSA-p5f9-c9j9-g8qx

CVSS3: 7.5

github

больше 4 лет назад

Shell command injection in gitea

ALT-PU-2022-1884

CVSS3: 7.5

altlinux

больше 4 лет назад

ALT-PU-2022-1884: package `gitea` update to version 1.16.7-alt1

ALT-PU-2022-1808

CVSS3: 7.5

altlinux

больше 4 лет назад

ALT-PU-2022-1808: package `gitea` update to version 1.16.7-alt1

EPSS

Процентиль: 100%

0.8793

Высокий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-116