CVE-2022-23642

PoC for Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary...