Lucene search
+L

1 matches found

0day.today
0day.today
added 2022/07/14 12:0 a.m.400 views

Sourcegraph gitserver sshCommand Remote Command Execution Exploit

A vulnerability exists within Sourcegraph's gitserver component that allows a remote attacker to execute arbitrary OS commands by modifying the core.sshCommand value within the git configuration. This command can then be triggered on demand by executing a git push operation. The vulnerability was...

8.8CVSS9AI score0.7431EPSS
SaveExploits8
Rows per page
Query Builder