gitblit-org/gitblit

Releases44

Frequency3 months 3 weeks

Last Release 12 months ago

Stars2.35K

pure java git solution

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-31267 ↗	May 21, 2022Saturday, 21 May 2022, 21:15	9.8 CRITICAL	7.5 HIGH
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.