PT-2023-13657 · Gitea+1 · Gitea+1

Zeripath · Published 2023-08-07 · Updated 2024-08-21 · CVE-2022-38795

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.17.2

Description The issue allows repo cloning to occur in the migration function.

Recommendations For versions prior to 1.17.2, update to version 1.17.2 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2024-3792

BIT-GITEA-2022-38795

CVE-2022-38795

GHSA-8J3V-68W3-3848

GO-2023-1999

Affected Products

Alt Linux

Gitea

References · 11

• https://github.com/go-gitea/gitea/pull/20869 · Vendor Advisory
• https://github.com/go-gitea/gitea/pull/20892 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1999 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38795 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitea-2022-38795 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8j3v-68w3-3848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38795 · Security Note
• https://github.com/go-gitea/gitea · Note
• https://blog.gitea.com/release-of-1.17.2 · Note
• https://t.me/cibsecurity/67888 · Telegram Post
• https://github.com/advisories/GHSA-8j3v-68w3-3848 · Note