Skip to content
OpenAdvisories

Vendor

sourcegraph

10 known vulnerabilities.

Products

sourcegraph 9 cody 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.9
    CVE-2022-41942

    Sourcegraph vulnerable to Comand Injection via gitserver

    Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the gitserver service, present in all Sourcegraph deployments. This vulnerability was caused by a lack of input validation on the host paramet…

    sourcegraph sourcegraph
  • High 8.8
    CVE-2022-23642 Public exploit EPSS 74%

    Code Injection in Sourcegraph

    Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an …

    sourcegraph sourcegraph