Sourcegraph (Sourcegraph) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 461 known versions, newest CVE from 2022-11-22. Vendor: Sourcegraph.
CVEs of Sourcegraph
- CVE-2022-41943 - CVSS 9 (critical), 2022-11-22: sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `customGitFetch`…
- CVE-2022-41942 - CVSS 7.9 (high), 2022-11-22: Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the gitserver service, present in all…
- CVE-2022-31155 - CVSS 4.3 (medium), 2022-08-01: Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible for an attacker to delete other users’…
- CVE-2022-31154 - CVSS 6.4 (medium), 2022-08-01: Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any…
- CVE-2022-29171 - CVSS 7.2 (high), 2022-05-06: Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver…
- CVE-2022-23642 - CVSS 8.8 (high), 2022-02-18: Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The…
- CVE-2022-23643 - CVSS 6.5 (medium), 2022-02-15: Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed side-channel vulnerabilitity in the…
- CVE-2021-43823 - CVSS 6.5 (medium), 2021-12-13: Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source…
- CVE-2021-32787 - CVSS 4.3 (medium), 2021-08-02: Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin area can be accessed…
- CVE-2020-12283 - CVSS 6.1 (medium), 2020-04-30: Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in…
