sourcegraph

5 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-31155

  Unauthorized overwriting of saved searches in Sourcegraph

  Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible for an attacker to delete other users’ saved searches due to a bug in the authorization check. The vulnerability does not allow the reading o…

  sourcegraph sourcegraph
  Aug 1, 2022
• Medium 6.4
  CVE-2022-31154

  Indirect Object Access in Sourcegraph Code Monitoring

  Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor…

  sourcegraph sourcegraph
  Aug 1, 2022
• Medium 6.6
  CVE-2022-29171

  Remote Code Execution in sourcegraph

  Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a `c…

  sourcegraph sourcegraph
  May 5, 2022
• Medium 6.5
  CVE-2022-23643

  Side-channel attack in Sourcegraph Code Monitors

  Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed side-channel vulnerabilitity in the Code Monitoring feature where strings in private source code could be guessed by an authenticated but un…

  sourcegraph sourcegraph
  Feb 15, 2022
• Medium 6.5
  CVE-2021-43823

  Side-channel attack in Sourcegraph

  Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searc…

  sourcegraph sourcegraph
  Dec 13, 2021