Back to feed
EUVD-2022-7173 · Published Oct 16, 2022
Gitea vulnerable to Argument Injection Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
Technologies
Gitea GiteaGo-Gitea Gitea
Weaknesses
CWE-88
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
