CVE-2022-31268
HIGH 7.5EPSS 10.7%
A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 10.69% chance of exploitation in the next 30 days, 96th percentile
- Nuclei
- high · CWE-22
- Published
- 2022-05-21
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- metaStor/Vuls/blob/main/gitblit/gitblit%20V1.9.3%20path%20traversal/gitblit%20V1.9.3%20pa…10★ · 2022-05-18