Vulnerability advisory
CVE-2022-30781
Also known as BIT-gitea-2022-30781GHSA-p5f9-c9j9-g8qxGO-2022-0450
Severity
Severity not reported.
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/go-gitea/gitea ↗ | |
| All commits before f4729e241827574ba7ccedc48729487a527ddbae | f4729e241827574ba7ccedc48729487a527ddbae |
Also listed as affected (29)
| |
Description
Gitea before 1.16.7 does not escape git fetch remote.
References
- Webpacketstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html ↗
- Webpacketstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html ↗
- Advisorygithub.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30781.json ↗
- Advisorynvd.nist.gov/vuln/detail/CVE-2022-30781 ↗
- Fixgithub.com/go-gitea/gitea/pull/19487 ↗
- Fixgithub.com/go-gitea/gitea/pull/19490 ↗
- ARTICLEblog.gitea.io/2022/05/gitea-1.16.7-is-released/ ↗