What is GHSA-fh55-vwjc-69c7?

GHSA-fh55-vwjc-69c7 is a security advisory published by GitHub Security Advisories with Critical severity. Unescaped control characters in Gitblit

Which CVE IDs does GHSA-fh55-vwjc-69c7 cover?

GHSA-fh55-vwjc-69c7 covers the following CVE IDs: CVE-2022-31267. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fh55-vwjc-69c7?

GHSA-fh55-vwjc-69c7 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-fh55-vwjc-69c7?

GHSA-fh55-vwjc-69c7 affects 1 product, including: maven/com.gitblit:gitblit:\u003c 1.9.3.

GHSA-fh55-vwjc-69c7CriticalCVSS 9.8

Unescaped control characters in Gitblit

Vendor

GitHub Security Advisories

Published

May 22, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-31267 →

📋 Description

Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.

🎯 Affected products1

maven/com.gitblit:gitblit:< 1.9.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-31267
https://github.com/gitblit/gitblit/issues/1410
https://github.com/gitblit/gitblit/releases/tag/v1.9.3
https://github.com/gitblit/gitblit/commit/9b4afad6f4be212474809533ec2c280cce86501a
https://github.com/advisories/GHSA-fh55-vwjc-69c7