Path traversal in Gitblit

높음 7.5CVE-2022-31268 · GHSA-2c65-rq62-fqhq · Published 21/05/2022 · updated 17/06/2026

요약

CVE-2022-31268은(는) com.gitblit:gitblit, gitblit (gitblit)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 10.7%, 전체 취약점의 95.8%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
com.gitblit:gitblit Maven	`≤ 1.9.3`	No fix yet
gitblit gitblit	`= 1.9.3`	No fix yet

Description

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

NVD description

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

References

nvd.nist.gov/vuln/detail/CVE-2022-31268 · ADVISORY
gitblit/gitblit · PACKAGE
metaStor/Vuls · WEB

com.gitblit:gitblit의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free