Path traversal in Gitblit

HIGH 7.5CVE-2022-31268 · GHSA-2c65-rq62-fqhq · Published 21/05/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
com.gitblit:gitblit Maven	`≤ 1.9.3`	No fix yet
gitblit gitblit	`= 1.9.3`	No fix yet

Description

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

NVD description

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

References

nvd.nist.gov/vuln/detail/CVE-2022-31268 · ADVISORY
gitblit/gitblit · PACKAGE
metaStor/Vuls · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free