CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25766

The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.077

EPSS Ranking 91.5%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2022-25766

Ungit Project » Ungit » Version: 0.1.0

cpe:2.3:a:ungit_project:ungit:0.1.0
Ungit Project » Ungit » Version: 0.1.1

cpe:2.3:a:ungit_project:ungit:0.1.1
Ungit Project » Ungit » Version: 0.1.2

cpe:2.3:a:ungit_project:ungit:0.1.2
Ungit Project » Ungit » Version: 0.1.3

cpe:2.3:a:ungit_project:ungit:0.1.3
Ungit Project » Ungit » Version: 0.1.4

cpe:2.3:a:ungit_project:ungit:0.1.4
Ungit Project » Ungit » Version: 0.1.5

cpe:2.3:a:ungit_project:ungit:0.1.5
Ungit Project » Ungit » Version: 0.1.6

cpe:2.3:a:ungit_project:ungit:0.1.6
Ungit Project » Ungit » Version: 0.1.7

cpe:2.3:a:ungit_project:ungit:0.1.7
Ungit Project » Ungit » Version: 0.1.8

cpe:2.3:a:ungit_project:ungit:0.1.8
Ungit Project » Ungit » Version: 0.1.9

cpe:2.3:a:ungit_project:ungit:0.1.9
Ungit Project » Ungit » Version: 0.10.0

cpe:2.3:a:ungit_project:ungit:0.10.0
Ungit Project » Ungit » Version: 0.10.1

cpe:2.3:a:ungit_project:ungit:0.10.1
Ungit Project » Ungit » Version: 0.10.2

cpe:2.3:a:ungit_project:ungit:0.10.2
Ungit Project » Ungit » Version: 0.10.3

cpe:2.3:a:ungit_project:ungit:0.10.3
Ungit Project » Ungit » Version: 0.2.0

cpe:2.3:a:ungit_project:ungit:0.2.0
Ungit Project » Ungit » Version: 0.2.1

cpe:2.3:a:ungit_project:ungit:0.2.1
Ungit Project » Ungit » Version: 0.3.0

cpe:2.3:a:ungit_project:ungit:0.3.0
Ungit Project » Ungit » Version: 0.3.1

cpe:2.3:a:ungit_project:ungit:0.3.1
Ungit Project » Ungit » Version: 0.3.2

cpe:2.3:a:ungit_project:ungit:0.3.2
Ungit Project » Ungit » Version: 0.4.0

cpe:2.3:a:ungit_project:ungit:0.4.0
Ungit Project » Ungit » Version: 0.5.0

cpe:2.3:a:ungit_project:ungit:0.5.0
Ungit Project » Ungit » Version: 0.6.0

cpe:2.3:a:ungit_project:ungit:0.6.0
Ungit Project » Ungit » Version: 0.6.1

cpe:2.3:a:ungit_project:ungit:0.6.1
Ungit Project » Ungit » Version: 0.6.2

cpe:2.3:a:ungit_project:ungit:0.6.2
Ungit Project » Ungit » Version: 0.7.0

cpe:2.3:a:ungit_project:ungit:0.7.0
Ungit Project » Ungit » Version: 0.7.1

cpe:2.3:a:ungit_project:ungit:0.7.1
Ungit Project » Ungit » Version: 0.7.2

cpe:2.3:a:ungit_project:ungit:0.7.2
Ungit Project » Ungit » Version: 0.8.0

cpe:2.3:a:ungit_project:ungit:0.8.0
Ungit Project » Ungit » Version: 0.8.1

cpe:2.3:a:ungit_project:ungit:0.8.1
Ungit Project » Ungit » Version: 0.8.2

cpe:2.3:a:ungit_project:ungit:0.8.2
Ungit Project » Ungit » Version: 0.8.3

cpe:2.3:a:ungit_project:ungit:0.8.3
Ungit Project » Ungit » Version: 0.8.4

cpe:2.3:a:ungit_project:ungit:0.8.4
Ungit Project » Ungit » Version: 0.9.0

cpe:2.3:a:ungit_project:ungit:0.9.0
Ungit Project » Ungit » Version: 0.9.1

cpe:2.3:a:ungit_project:ungit:0.9.1
Ungit Project » Ungit » Version: 0.9.2

cpe:2.3:a:ungit_project:ungit:0.9.2
Ungit Project » Ungit » Version: 0.9.3

cpe:2.3:a:ungit_project:ungit:0.9.3
Ungit Project » Ungit » Version: 1.0.0

cpe:2.3:a:ungit_project:ungit:1.0.0
Ungit Project » Ungit » Version: 1.0.1

cpe:2.3:a:ungit_project:ungit:1.0.1
Ungit Project » Ungit » Version: 1.1.0

cpe:2.3:a:ungit_project:ungit:1.1.0
Ungit Project » Ungit » Version: 1.1.1

cpe:2.3:a:ungit_project:ungit:1.1.1
Ungit Project » Ungit » Version: 1.1.10

cpe:2.3:a:ungit_project:ungit:1.1.10
Ungit Project » Ungit » Version: 1.1.11

cpe:2.3:a:ungit_project:ungit:1.1.11
Ungit Project » Ungit » Version: 1.1.12

cpe:2.3:a:ungit_project:ungit:1.1.12
Ungit Project » Ungit » Version: 1.1.13

cpe:2.3:a:ungit_project:ungit:1.1.13
Ungit Project » Ungit » Version: 1.1.14

cpe:2.3:a:ungit_project:ungit:1.1.14
Ungit Project » Ungit » Version: 1.1.15

cpe:2.3:a:ungit_project:ungit:1.1.15
Ungit Project » Ungit » Version: 1.1.16

cpe:2.3:a:ungit_project:ungit:1.1.16
Ungit Project » Ungit » Version: 1.1.17

cpe:2.3:a:ungit_project:ungit:1.1.17
Ungit Project » Ungit » Version: 1.1.18

cpe:2.3:a:ungit_project:ungit:1.1.18
Ungit Project » Ungit » Version: 1.1.19

cpe:2.3:a:ungit_project:ungit:1.1.19
Ungit Project » Ungit » Version: 1.1.2

cpe:2.3:a:ungit_project:ungit:1.1.2
Ungit Project » Ungit » Version: 1.1.20

cpe:2.3:a:ungit_project:ungit:1.1.20
Ungit Project » Ungit » Version: 1.1.21

cpe:2.3:a:ungit_project:ungit:1.1.21
Ungit Project » Ungit » Version: 1.1.22

cpe:2.3:a:ungit_project:ungit:1.1.22
Ungit Project » Ungit » Version: 1.1.23

cpe:2.3:a:ungit_project:ungit:1.1.23
Ungit Project » Ungit » Version: 1.1.24

cpe:2.3:a:ungit_project:ungit:1.1.24
Ungit Project » Ungit » Version: 1.1.25

cpe:2.3:a:ungit_project:ungit:1.1.25
Ungit Project » Ungit » Version: 1.1.26

cpe:2.3:a:ungit_project:ungit:1.1.26
Ungit Project » Ungit » Version: 1.1.27

cpe:2.3:a:ungit_project:ungit:1.1.27
Ungit Project » Ungit » Version: 1.1.28

cpe:2.3:a:ungit_project:ungit:1.1.28
Ungit Project » Ungit » Version: 1.1.29

cpe:2.3:a:ungit_project:ungit:1.1.29
Ungit Project » Ungit » Version: 1.1.3

cpe:2.3:a:ungit_project:ungit:1.1.3
Ungit Project » Ungit » Version: 1.1.30

cpe:2.3:a:ungit_project:ungit:1.1.30
Ungit Project » Ungit » Version: 1.1.32

cpe:2.3:a:ungit_project:ungit:1.1.32
Ungit Project » Ungit » Version: 1.1.33

cpe:2.3:a:ungit_project:ungit:1.1.33
Ungit Project » Ungit » Version: 1.1.5

cpe:2.3:a:ungit_project:ungit:1.1.5
Ungit Project » Ungit » Version: 1.1.6

cpe:2.3:a:ungit_project:ungit:1.1.6
Ungit Project » Ungit » Version: 1.1.7

cpe:2.3:a:ungit_project:ungit:1.1.7
Ungit Project » Ungit » Version: 1.1.8

cpe:2.3:a:ungit_project:ungit:1.1.8
Ungit Project » Ungit » Version: 1.1.9

cpe:2.3:a:ungit_project:ungit:1.1.9
Ungit Project » Ungit » Version: 1.2.0

cpe:2.3:a:ungit_project:ungit:1.2.0
Ungit Project » Ungit » Version: 1.2.1

cpe:2.3:a:ungit_project:ungit:1.2.1
Ungit Project » Ungit » Version: 1.2.2

cpe:2.3:a:ungit_project:ungit:1.2.2
Ungit Project » Ungit » Version: 1.2.3

cpe:2.3:a:ungit_project:ungit:1.2.3
Ungit Project » Ungit » Version: 1.3.0

cpe:2.3:a:ungit_project:ungit:1.3.0
Ungit Project » Ungit » Version: 1.3.1

cpe:2.3:a:ungit_project:ungit:1.3.1
Ungit Project » Ungit » Version: 1.3.2

cpe:2.3:a:ungit_project:ungit:1.3.2
Ungit Project » Ungit » Version: 1.3.3

cpe:2.3:a:ungit_project:ungit:1.3.3
Ungit Project » Ungit » Version: 1.4.0

cpe:2.3:a:ungit_project:ungit:1.4.0
Ungit Project » Ungit » Version: 1.4.1

cpe:2.3:a:ungit_project:ungit:1.4.1
Ungit Project » Ungit » Version: 1.4.10

cpe:2.3:a:ungit_project:ungit:1.4.10
Ungit Project » Ungit » Version: 1.4.12

cpe:2.3:a:ungit_project:ungit:1.4.12
Ungit Project » Ungit » Version: 1.4.13

cpe:2.3:a:ungit_project:ungit:1.4.13
Ungit Project » Ungit » Version: 1.4.14

cpe:2.3:a:ungit_project:ungit:1.4.14
Ungit Project » Ungit » Version: 1.4.15

cpe:2.3:a:ungit_project:ungit:1.4.15
Ungit Project » Ungit » Version: 1.4.16

cpe:2.3:a:ungit_project:ungit:1.4.16
Ungit Project » Ungit » Version: 1.4.17

cpe:2.3:a:ungit_project:ungit:1.4.17
Ungit Project » Ungit » Version: 1.4.18

cpe:2.3:a:ungit_project:ungit:1.4.18
Ungit Project » Ungit » Version: 1.4.19

cpe:2.3:a:ungit_project:ungit:1.4.19
Ungit Project » Ungit » Version: 1.4.2

cpe:2.3:a:ungit_project:ungit:1.4.2
Ungit Project » Ungit » Version: 1.4.20

cpe:2.3:a:ungit_project:ungit:1.4.20
Ungit Project » Ungit » Version: 1.4.21

cpe:2.3:a:ungit_project:ungit:1.4.21
Ungit Project » Ungit » Version: 1.4.22

cpe:2.3:a:ungit_project:ungit:1.4.22
Ungit Project » Ungit » Version: 1.4.24

cpe:2.3:a:ungit_project:ungit:1.4.24
Ungit Project » Ungit » Version: 1.4.25

cpe:2.3:a:ungit_project:ungit:1.4.25
Ungit Project » Ungit » Version: 1.4.26

cpe:2.3:a:ungit_project:ungit:1.4.26
Ungit Project » Ungit » Version: 1.4.27

cpe:2.3:a:ungit_project:ungit:1.4.27
Ungit Project » Ungit » Version: 1.4.28

cpe:2.3:a:ungit_project:ungit:1.4.28
Ungit Project » Ungit » Version: 1.4.29

cpe:2.3:a:ungit_project:ungit:1.4.29
Ungit Project » Ungit » Version: 1.4.3

cpe:2.3:a:ungit_project:ungit:1.4.3
Ungit Project » Ungit » Version: 1.4.31

cpe:2.3:a:ungit_project:ungit:1.4.31
Ungit Project » Ungit » Version: 1.4.32

cpe:2.3:a:ungit_project:ungit:1.4.32
Ungit Project » Ungit » Version: 1.4.34

cpe:2.3:a:ungit_project:ungit:1.4.34
Ungit Project » Ungit » Version: 1.4.35

cpe:2.3:a:ungit_project:ungit:1.4.35
Ungit Project » Ungit » Version: 1.4.36

cpe:2.3:a:ungit_project:ungit:1.4.36
Ungit Project » Ungit » Version: 1.4.40

cpe:2.3:a:ungit_project:ungit:1.4.40
Ungit Project » Ungit » Version: 1.4.41

cpe:2.3:a:ungit_project:ungit:1.4.41
Ungit Project » Ungit » Version: 1.4.42

cpe:2.3:a:ungit_project:ungit:1.4.42
Ungit Project » Ungit » Version: 1.4.43

cpe:2.3:a:ungit_project:ungit:1.4.43
Ungit Project » Ungit » Version: 1.4.44

cpe:2.3:a:ungit_project:ungit:1.4.44
Ungit Project » Ungit » Version: 1.4.45

cpe:2.3:a:ungit_project:ungit:1.4.45
Ungit Project » Ungit » Version: 1.4.46

cpe:2.3:a:ungit_project:ungit:1.4.46
Ungit Project » Ungit » Version: 1.4.47

cpe:2.3:a:ungit_project:ungit:1.4.47
Ungit Project » Ungit » Version: 1.4.48

cpe:2.3:a:ungit_project:ungit:1.4.48
Ungit Project » Ungit » Version: 1.4.5

cpe:2.3:a:ungit_project:ungit:1.4.5
Ungit Project » Ungit » Version: 1.4.7

cpe:2.3:a:ungit_project:ungit:1.4.7
Ungit Project » Ungit » Version: 1.4.8

cpe:2.3:a:ungit_project:ungit:1.4.8
Ungit Project » Ungit » Version: 1.4.9

cpe:2.3:a:ungit_project:ungit:1.4.9
Ungit Project » Ungit » Version: 1.5.0

cpe:2.3:a:ungit_project:ungit:1.5.0
Ungit Project » Ungit » Version: 1.5.1

cpe:2.3:a:ungit_project:ungit:1.5.1
Ungit Project » Ungit » Version: 1.5.10

cpe:2.3:a:ungit_project:ungit:1.5.10
Ungit Project » Ungit » Version: 1.5.11

cpe:2.3:a:ungit_project:ungit:1.5.11
Ungit Project » Ungit » Version: 1.5.12

cpe:2.3:a:ungit_project:ungit:1.5.12
Ungit Project » Ungit » Version: 1.5.13

cpe:2.3:a:ungit_project:ungit:1.5.13
Ungit Project » Ungit » Version: 1.5.14

cpe:2.3:a:ungit_project:ungit:1.5.14
Ungit Project » Ungit » Version: 1.5.15

cpe:2.3:a:ungit_project:ungit:1.5.15
Ungit Project » Ungit » Version: 1.5.16

cpe:2.3:a:ungit_project:ungit:1.5.16
Ungit Project » Ungit » Version: 1.5.17

cpe:2.3:a:ungit_project:ungit:1.5.17
Ungit Project » Ungit » Version: 1.5.18

cpe:2.3:a:ungit_project:ungit:1.5.18
Ungit Project » Ungit » Version: 1.5.19

cpe:2.3:a:ungit_project:ungit:1.5.19
Ungit Project » Ungit » Version: 1.5.2

cpe:2.3:a:ungit_project:ungit:1.5.2
Ungit Project » Ungit » Version: 1.5.3

cpe:2.3:a:ungit_project:ungit:1.5.3
Ungit Project » Ungit » Version: 1.5.4

cpe:2.3:a:ungit_project:ungit:1.5.4
Ungit Project » Ungit » Version: 1.5.5

cpe:2.3:a:ungit_project:ungit:1.5.5
Ungit Project » Ungit » Version: 1.5.6

cpe:2.3:a:ungit_project:ungit:1.5.6
Ungit Project » Ungit » Version: 1.5.7

cpe:2.3:a:ungit_project:ungit:1.5.7
Ungit Project » Ungit » Version: 1.5.8

cpe:2.3:a:ungit_project:ungit:1.5.8
Ungit Project » Ungit » Version: 1.5.9

cpe:2.3:a:ungit_project:ungit:1.5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25766

Products

Pricing

Contact Us