CVE-2022-23642

🗓️ 18 Feb 2022 22:15:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 200 Views🌐 WEB

Sourcegraph code search & navigation engine vulnerable to remote code execution in gitserver

Reporter	Title	Published	Views	Family All 23
zdt	Sourcegraph Gitserver 3.36.3 - Remote Code Execution Exploit	14 Jun 202200:00	–	zdt
zdt	Sourcegraph gitserver sshCommand Remote Command Execution Exploit	14 Jul 202200:00	–	zdt
GithubExploit	Exploit for Code Injection in Sourcegraph	10 Jun 202206:12	–	githubexploit
BDU FSTEC	The vulnerability of the gitserver service in the Sourcegraph search and navigation system, related to improper code generation management, allows a violator to execute arbitrary code.	23 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-23642	19 Feb 202202:38	–	circl
CNNVD	Sourcegraph 代码注入漏洞	18 Feb 202200:00	–	cnnvd
CNVD	Sourcegraph code injection vulnerability	22 Feb 202200:00	–	cnvd
Check Point Advisories	Sourcegraph Command Injection (CVE-2022-23642)	20 Jul 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-23642 Code Injection in Sourcegraph	18 Feb 202222:15	–	cvelist
Exploit DB	Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)	14 Jun 202200:00	–	exploitdb

NVD

Vulners

Node

sourcegraph sourcegraphRange<3.37

[
  {
    "product": "sourcegraph",
    "vendor": "sourcegraph",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.37"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/167741/Sourcegraph-gitserver-sshCommand-Remote-Command-Execution.html
github	www.github.com/sourcegraph/sourcegraph/security/advisories/GHSA-qcmp-fx72-q8q9
github	www.github.com/sourcegraph/sourcegraph/pull/30833
packetstormsecurity	www.packetstormsecurity.com/files/167506/Sourcegraph-Gitserver-3.36.3-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
Repo	request body	/exec	Gitserver exec API used to set config (core.sshCommand) enabling RCE when exploited via crafted Args.	CWE-94, CWE-862
Args	request body	/exec	Gitserver exec API used to set config (core.sshCommand) enabling RCE when exploited via crafted Args.	CWE-94, CWE-862