CVE-2022-23642

🗓️ 18 Feb 2022 22:15:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 176 Views🌐 WEB

Sourcegraph code search & navigation engine vulnerable to remote code execution in gitserver

Reporter	Title	Published	Views	Family All 22
0day.today	Sourcegraph Gitserver 3.36.3 - Remote Code Execution Exploit	14 Jun 202200:00	–	zdt
0day.today	Sourcegraph gitserver sshCommand Remote Command Execution Exploit	14 Jul 202200:00	–	zdt
GithubExploit	Exploit for Code Injection in Sourcegraph	10 Jun 202206:12	–	githubexploit
BDU FSTEC	The vulnerability of the gitserver service in the Sourcegraph search and navigation system, related to improper code generation management, allows a violator to execute arbitrary code.	23 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-23642	19 Feb 202202:38	–	circl
CNNVD	Sourcegraph 代码注入漏洞	18 Feb 202200:00	–	cnnvd
CNVD	Sourcegraph code injection vulnerability	22 Feb 202200:00	–	cnvd
Check Point Advisories	Sourcegraph Command Injection (CVE-2022-23642)	20 Jul 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-23642 Code Injection in Sourcegraph	18 Feb 202222:15	–	cvelist
Exploit DB	Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)	14 Jun 202200:00	–	exploitdb

NVD

Vulners

Node

sourcegraph sourcegraphRange<3.37

[
  {
    "product": "sourcegraph",
    "vendor": "sourcegraph",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.37"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/167741/Sourcegraph-gitserver-sshCommand-Remote-Command-Execution.html
github	www.github.com/sourcegraph/sourcegraph/security/advisories/GHSA-qcmp-fx72-q8q9
github	www.github.com/sourcegraph/sourcegraph/pull/30833
packetstormsecurity	www.packetstormsecurity.com/files/167506/Sourcegraph-Gitserver-3.36.3-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
Repo	request body	/exec	Gitserver exec API used to set core.sshCommand via config, enabling arbitrary command execution when combined with git operations.	CWE-94, CWE-862
Args	request body	/exec	Gitserver exec API used to set core.sshCommand via config, enabling arbitrary command execution when combined with git operations.	CWE-94, CWE-862
cloned	query param	/list	Gitserver list API used to enumerate cloned repositories, enabling target discovery for exploitation via the exec API.	CWE-94, CWE-862