Published: 16/05/2022 Updated: 27/01/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Gitea prior to 1.16.7 does not escape git fetch remote.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gitea gitea

Check Point Reference: CPAI-2022-1966 Date Published: 24 Dec 2023 Severity: High ...

This Metasploit module exploits the Git fetch command in Gitea repository migration process that leads to a remote command execution on the system This vulnerability affects Gitea versions prior to 1167 ...

🍵 CVE-2022-30781 Gitea repository migration remote command execution exploit How to use Run an HTTP filesystem server with the files in this repository Edit the command to be exeucted in api/v1/repos/e99/exp/pulls/1/indexhtml L96 Migrate remote repository with URL <your_host>/e99/exp on the Gitea instance Pwnned! Reference tttangcom/archi

🍵 Gitea repository migration remote command execution exploit.

🍵 CVE-2022-30781 Gitea repository migration remote command execution exploit How to use Run an HTTP filesystem server with the files in this repository Edit the command to be exeucted in api/v1/repos/e99/exp/pulls/1/indexhtml L96 Migrate remote repository with URL <your_host>/e99/exp on the Gitea instance Pwnned! Reference tttangcom/archi

CWE-116 https://blog.gitea.io/2022/05/gitea-1.16.7-is-released/https://github.com/go-gitea/gitea/pull/19487 https://github.com/go-gitea/gitea/pull/19490 http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html https://nvd.nist.gov https://github.com/sd45D6SA456/asd https://github.com/wuhan005/CVE-2022-30781 https://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2022-1966.html

CVE-2022-30781

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect