GHSA-fh55-vwjc-69c7

Unescaped control characters in Gitblit

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-31267

Packages

Ecosystem	Package	Affected	Fixed in
Maven	com.gitblit:gitblit	< 1.9.3	1.9.3

Details

As written in the advisory (Markdown source, shown as plain text).

Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-31267 advisory
https://github.com/gitblit/gitblit/issues/1410 web
https://github.com/gitblit/gitblit/commit/9b4afad6f4be212474809533ec2c280cce86501a web
https://github.com/gitblit/gitblit web
https://github.com/gitblit/gitblit/releases/tag/v1.9.3 web