Lucene search
Veracode Vulnerability DatabaseVERACODE:38239HistoryNov 24, 2022 - 11:49 a.m.
Arbitrary Code Execution
2022-11-2411:49:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
sourcegraph
arbitrary code execution
vulnerability
buildcustomfetchmappings
customfetch.go
experimental feature
gitserver
software security
0.001 Low
EPSS
Percentile
42.0%
github.com/sourcegraph/sourcegraph is vulnerable to arbitrary code execution. The vulnerability exists in the buildCustomFetchMappings function in customfetch.go due to an experimental feature which if enabled on the gitserver which allows an attacker to inject and execute arbitrary commands.
Related
osv
osv
CVE-2022-41943
2022-11-22 19:15:18
prion
prion
Design/Logic Flaw
2022-11-22 19:15:00
cvelist
cvelist
CVE-2022-41943 Incorrect default permissions found in Sourcegraph
2022-11-22 00:00:00
nvd
nvd
CVE-2022-41943
2022-11-22 19:15:18
cve
cve
CVE-2022-41943
2022-11-22 19:15:18