Skip to content
OpenAdvisories

Vendor

sourcegraph

10 known vulnerabilities.

Products

sourcegraph 9 cody 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-23642 Public exploit EPSS 74%

    Code Injection in Sourcegraph

    Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an …

    sourcegraph sourcegraph