Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage
    will take significant time to parse. (CVE-2022-32149)

  - Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are
    mishandled. (CVE-2022-42968)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are
    mishandled. (CVE-2022-42968)

The remote host is affected by the vulnerability described in GLSA-202210-14 (Gitea: Multiple Vulnerabilities)

  - Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. (CVE-2022-1928)

  - An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage     will take significant time to parse. (CVE-2022-32149)

  - In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper     access controls, an attacker could assign any issue to any project in Gitea (there was no permission check     for fetching the issue). As a result, the attacker would get access to private issue titles.
    (CVE-2022-38183)

  - Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are     mishandled. (CVE-2022-42968)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
426457	Alpine: multiple gitea packages: security update to 1.17.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
426457	Alpine: multiple gitea packages: security update to 1.17.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
419825	SCA: security update for github.com/go-gitea/gitea (GHSA-w8xw-7crf-h23x)	Tenable Cloud Security	SCA Checks	Local	critical
419825	SCA: security update for github.com/go-gitea/gitea (GHSA-w8xw-7crf-h23x)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
404676	Alpine: multiple gitea packages: security update to 1.17.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
404676	Alpine: multiple gitea packages: security update to 1.17.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
166729	GLSA-202210-14 : Gitea: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical

Detections

Analytics

CVE-2022-42968

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical