CVE-2022-42968

🗓️ 18 Oct 2022 10:10:40Reported by redhat.comType

A flaw in Gitea allows crafting of git command argument

Reporter	Title	Published	Views	Family All 14
Veracode	Cross-Site Scripting (XSS)	17 Oct 202212:26	–	veracode
OSV	Gitea vulnerable to Argument Injection in code.gitea.io/gitea	21 Aug 202416:03	–	osv
OSV	BIT-gitea-2022-42968	6 Mar 202410:52	–	osv
OSV	CVE-2022-42968	16 Oct 202204:15	–	osv
OSV	Gitea vulnerable to Argument Injection	16 Oct 202212:00	–	osv
NVD	CVE-2022-42968	16 Oct 202204:15	–	nvd
AlpineLinux	CVE-2022-42968	16 Oct 202204:15	–	alpinelinux
Github Security Blog	Gitea vulnerable to Argument Injection	16 Oct 202212:00	–	github
OpenVAS	Gitea < 1.17.3 Privilege Escalation Vulnerability	18 Oct 202200:00	–	openvas
Cvelist	CVE-2022-42968	16 Oct 202200:00	–	cvelist

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42968
github	www.github.com/advisories/GHSA-w8xw-7crf-h23x
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Oct 2022 10:40Current

3.1Low risk

Vulners AI Score3.1

CVSS39.8

EPSS0.002