CVE-2022-38301

概要

参考情報

• theonedev/onedev commit 5b6a19c · Patch
• research.loginsoft.com/vulnerability/path-traversal-in-onedev-v7-4-14 · Exploit

onedev のその他の脆弱性

• CVE-2024-45309高 7.5OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read ar…
• CVE-2023-24828高 8.8Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and passwo…
• CVE-2022-39208高 7.5Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory are exposed and can be…
• CVE-2022-39207中 5.4Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. During CI/CD builds, it is possible to save build artifacts for late…
• CVE-2022-39206緊急 9.9Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket (e.g. /var/…