CVE-2022-42968
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
gitea
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.3"}]}]
参照URL
- advisory security.gentoo.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web github.com