CVE-2022-42968
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
Original description
The description as published by the source.
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
gitea
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.3"}]}]
References
- advisory security.gentoo.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web github.com