← All advisories

Medium severity6.5NVD Advisory· Published Aug 7, 2023· Updated Jun 17, 2026

CVE-2022-38795

CVE-2022-38795

Description

In Gitea through 1.17.1, repo cloning can occur in the migration function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
code.gitea.io/giteaGo	< 1.17.2	1.17.2

Affected products

4

Go Gitea/Gitea2 versions
cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*range: <=1.17.1
- (no CPE)
ghsa-coords2 versions
pkg:golang/code.gitea.io/gitea pkg:bitnami/gitea
< 1.17.2+ 1 more
- (no CPE)range: < 1.17.2
- (no CPE)range: < 1.17.2

Patches

Vulnerability mechanics

References

6

github.com/go-gitea/gitea/pull/20869nvdPatchVendor AdvisoryWEB
github.com/go-gitea/gitea/pull/20892nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-8j3v-68w3-3848ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-38795ghsaADVISORY
blog.gitea.com/release-of-1.17.2ghsaWEB
blog.gitea.com/release-of-1.17.2/nvdRelease Notes

News mentions

0

No linked articles in our index yet.