CVE-2022-31267 Unescaped control characters in Gitblit
Attackers can escalate privileges to admin by injecting control characters into profile fields in Gitblit.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-31267?
CVE-2022-31267 is a critical vulnerability in n/a, published on 21 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.
Weakness: CWE-269
Which versions are affected by CVE-2022-31267?
2 open source packages ship an affected version, including com.gitblit:gitblit. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.gitblit:gitblit Maven | All versions | 1.9.3 |
com.gitblit:gitblit Maven | All versions | 1.9.3 |
Products include Gitblit Gitblit.
How do I fix CVE-2022-31267?
Upgrade com.gitblit:gitblit to 1.9.3 or later.
Is CVE-2022-31267 being exploited?
There is no known exploitation of CVE-2022-31267 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fh55-vwjc-69c7.