CVE-2022-31267

critical · 9.8

Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.

9.8

CVSS

17.5%

EPSS (exploit prob.)

97th

EPSS percentile

2022-05-21

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-269

Affected products

Vendor	Product	Affected versions
gitblit	gitblit	1.9.2

Check a specific version with /api/v1/cve/match.

References

https://github.com/gitblit/gitblit/issues/1410
https://github.com/gitblit/gitblit/releases/tag/v1.9.3
https://github.com/gitblit/gitblit/issues/1410
https://github.com/gitblit/gitblit/releases/tag/v1.9.3

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-31267