Remote Code Execution (RCE)

🗓️ 18 May 2022 10:53:06Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 1647 Views

Vulnerability in github.com/go-gitea/gitea allows remote code execution

Reporter	Title	Published	Views	Family All 27
0day.today	Gitea 1.16.6 - Remote Code Execution Exploit	15 Sep 202200:00	–	zdt
0day.today	Gitea Git Fetch Remote Code Execution Exploit	17 Nov 202200:00	–	zdt
GithubExploit	Exploit for Improper Encoding or Escaping of Output in Gitea	22 May 202205:15	–	githubexploit
ATTACKERKB	CVE-2022-30781	16 May 202204:15	–	attackerkb
AlpineLinux	CVE-2022-30781	16 May 202200:00	–	alpinelinux
Circl	CVE-2022-30781	15 Sep 202200:00	–	circl
CNNVD	Gitea 安全漏洞	16 May 202200:00	–	cnnvd
CVE	CVE-2022-30781	16 May 202200:00	–	cve
Cvelist	CVE-2022-30781	16 May 202200:00	–	cvelist
Exploit DB	Gitea 1.16.6 - Remote Code Execution (RCE) (Metasploit)	15 Sep 202200:00	–	exploitdb

Vulners

Node

gitea giteaMatch1.15.2-r2go

AND

gitea giteaMatch1.16.4-r1go

AND

gitea giteaMatch1.15.2-r0go

AND

gitea giteaMatch1.11.4-r1go

AND

gitea giteaMatch1.11.2-r1go

AND

gitea giteaMatch1.13.7-r0go

AND

gitea giteaMatch1.14.4-r0go

AND

gitea giteaMatch1.14.2-r1go

AND

gitea giteaMatch1.16.3-r0go

AND

gitea giteaMatch1.16.4-r0go

AND

gitea giteaMatch1.16.1-r0go

AND

gitea giteaMatch1.11.5-r0go

AND

gitea giteaMatch1.16.2-r0go

AND

gitea giteaMatch1.14.0-r0go

AND

gitea giteaMatch1.16.5-r0go

AND

gitea giteaMatch1.15.8-r0go

AND

gitea giteaMatch1.15.10-r1go

AND

gitea giteaMatch1.14.2-r0go

AND

gitea giteaMatch1.13.4-r0go

AND

gitea giteaMatch1.15.11-r0go

AND

gitea giteaMatch1.14.1-r0go

AND

gitea giteaMatch1.13.6-r0go

AND

gitea giteaMatch1.15.2-r3go

AND

gitea giteaMatch1.11.3-r0go

AND

gitea giteaMatch1.11.4-r2go

AND

gitea giteaMatch1.14.6-r0go

AND

gitea giteaMatch1.15.9-r0go

AND

gitea giteaMatch1.16.6-r0go

AND

gitea giteaMatch1.14.3-r0go

AND

gitea giteaMatch1.15.7-r0go

AND

gitea giteaMatch1.14.5-r0go

AND

gitea giteaMatch1.11.1-r0go

AND

gitea giteaMatch1.15.10-r0go

AND

gitea giteaMatch1.15.3-r1go

AND

gitea giteaMatch1.11.6-r0go

AND

gitea giteaMatch1.15.3-r0go

AND

gitea giteaMatch1.13.3-r0go

AND

alpinelinux alpine_linuxMatchedge

gitea giteaMatch1.16.6-r0go

AND

alpinelinux alpine_linuxMatch3.16

go-gitea github.com/go-gitea/giteaRangev1.9.0-rc2–1.9.0-rc2go

Source	Link
github	www.github.com/go-gitea/gitea/commit/242f7f1a528af0b85ad0dd6fa88ed2d889b92385
github	www.github.com/go-gitea/gitea/pull/19490
github	www.github.com/go-gitea/gitea/pull/19487
github	www.github.com/advisories/GHSA-p5f9-c9j9-g8qx
packetstormsecurity	www.packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html
blog	www.blog.gitea.io/2022/05/gitea-1.16.7-is-released/

27 Jan 2023 21:58Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.87678