Bug 2135739 (CVE-2022-42968)

Summary: CVE-2022-42968 gitea: Sanitize and Escape refs in git backend
Product: [Other] Security Response Reporter: Avinash Hanwate <ahanwate>
Component: vulnerabilityAssignee: Nobody <nobody>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: bdettelb, gparvin, jcantril, jramanat, jwon, lball, matzew, njean, pahickey, periklis, rhuss, stcannon
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Gitea 1.17.3 Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in Gitea. The self-hosted Git service does not sanitize and escape refs in the git backend. This issue could allow an attacker to craft arguments for the git commands, which will be mishandled.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2135855    
Bug Blocks: 2135210    

Description Avinash Hanwate 2022-10-18 10:21:40 UTC 
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.

https://github.com/go-gitea/gitea/pull/21463
https://github.com/go-gitea/gitea/releases/tag/v1.17.3