~ / search / GHSA-w8xw-7crf-h23x

GHSA-w8xw-7crf-h23x

Gitea vulnerable to Argument Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-42968

Packages

EcosystemPackageAffectedFixed in
Go github.com/go-gitea/gitea < 1.17.3 1.17.3

Details

As written in the advisory (Markdown source, shown as plain text).

Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.

References

External links from the advisory. They lead to third-party sites.