Lucene search
Veracode Vulnerability DatabaseVERACODE:35583HistoryMay 18, 2022 - 10:53 a.m.
Remote Code Execution (RCE)
2022-05-1810:53:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1168
remote code execution
github.com/go-gitea/gitea
vulnerability
EPSS
0.812
Percentile
98.4%
github.com/go-gitea/gitea is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the newPullRequest function in the gitea_uploader.go file allowing an attacker to inject maliciously crafted script into the system.
References
packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html
packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html
blog.gitea.io/2022/05/gitea-1.16.7-is-released/
github.com/advisories/GHSA-p5f9-c9j9-g8qx
github.com/go-gitea/gitea/commit/242f7f1a528af0b85ad0dd6fa88ed2d889b92385
github.com/go-gitea/gitea/pull/19487
github.com/go-gitea/gitea/pull/19490
Related
prion
prion
Design/Logic Flaw
2022-05-16 04:15:00
cvelist
cvelist
CVE-2022-30781
2022-05-16 00:00:00
cve
cve
CVE-2022-30781
2022-05-16 04:15:13
openvas
openvas
Gitea < 1.16.7 Privilege Escalation Vulnerability
2022-05-19 00:00:00
exploitdb
exploitdb
Gitea 1.16.6 - Remote Code Execution (RCE) (Metasploit)
2022-09-15 00:00:00
nvd
nvd
CVE-2022-30781
2022-05-16 04:15:13
zdt
zdt
Gitea Git Fetch Remote Code Execution Exploit
2022-11-17 00:00:00
Gitea 1.16.6 - Remote Code Execution Exploit
2022-09-15 00:00:00
osv
osv
BIT-gitea-2022-30781
2024-03-06 10:52:59
Shell command injection in gitea
2022-05-17 00:01:46
CVE-2022-30781
2022-05-16 04:15:13
gitlab
gitlab
Improper Encoding or Escaping of Output
2022-05-17 00:00:00
github
github
Shell command injection in gitea
2022-05-17 00:01:46
metasploit
metasploit
Gitea Git Fetch Remote Code Execution
2022-10-03 12:57:09
githubexploit
githubexploit
Exploit for Improper Encoding or Escaping of Output in Gitea
2022-05-22 05:15:58
alpinelinux
alpinelinux
CVE-2022-30781
2022-05-16 04:15:13
packetstorm
packetstorm
Gitea 1.16.6 Remote Code Execution
2022-09-15 00:00:00
Gitea Git Fetch Remote Code Execution
2022-11-17 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-11-18 21:49:52