Gitea erroneous repo clones

GHSA-8j3v-68w3-3848 · BIT-gitea-2022-38795 · CVE-2022-38795 · GO-2023-1999

Published Aug 7, 2023 · Modified Aug 21, 2024

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

In Gitea through 1.17.1, repo cloning can occur in the migration function.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-38795
WEB https://github.com/go-gitea/gitea/pull/20869
WEB https://github.com/go-gitea/gitea/pull/20892
WEB https://blog.gitea.com/release-of-1.17.2
PACKAGE https://github.com/go-gitea/gitea

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

Gitea erroneous repo clones

Description

References

More Go vulnerabilities

Start Securing