Gitea vulnerable to Argument Injection

🗓️ 16 Oct 2022 12:23:00Reported by GitHub Advisory DatabaseType

Gitea vulnerable to Argument Injectio

Reporter	Title	Published	Views	Family All 14
Veracode	Cross-Site Scripting (XSS)	17 Oct 202212:26	–	veracode
OSV	CVE-2022-42968	16 Oct 202204:15	–	osv
OSV	Gitea vulnerable to Argument Injection in code.gitea.io/gitea	21 Aug 202416:03	–	osv
OSV	BIT-gitea-2022-42968	6 Mar 202410:52	–	osv
OSV	Gitea vulnerable to Argument Injection	16 Oct 202212:00	–	osv
OpenVAS	Gitea < 1.17.3 Privilege Escalation Vulnerability	18 Oct 202200:00	–	openvas
NVD	CVE-2022-42968	16 Oct 202204:15	–	nvd
AlpineLinux	CVE-2022-42968	16 Oct 202204:15	–	alpinelinux
Cvelist	CVE-2022-42968	16 Oct 202200:00	–	cvelist
Prion	Command injection	16 Oct 202204:15	–	prion

Vulners

Node

go-gitea giteaRange<1.17.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42968
github	www.github.com/go-gitea/gitea/pull/21463
github	www.github.com/go-gitea/gitea/releases/tag/v1.17.3
security	www.security.gentoo.org/glsa/202210-14
github	www.github.com/advisories/GHSA-w8xw-7crf-h23x

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2022 12:00Current

9.0High risk

Vulners AI Score9.0

EPSS0.002

CWE-88