CVE-2022-41943 — Incorrect default permissions found in Sourcegraph
sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `customGitFetch` feature was enable…
Published: 2022-11-22 · CVSS: 9.0 · CVSS 3.1
sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `customGitFetch` feature was enabled. This experimental feature has now been disabled by default. This issue has been patched in version 4.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7