CVE-2022-23642

This exploit leverages CVE-2022-23642 to achieve RCE on Sourcegraph Gitserver by abusing the lack of restriction on git config execution, allowing arbitrary command injection via the 'core.sshCommand' parameter. The exploit triggers command execution by setting a malicious SSH command and then invoking a git push operation.

This PoC exploits CVE-2022-23642 in Sourcegraph Gitserver < 3.37.0 by abusing the 'core.sshCommand' git config to achieve remote code execution. It sends crafted HTTP requests to set the malicious config and trigger execution via a git push operation.

This Metasploit module exploits CVE-2022-23642 in Sourcegraph's gitserver by manipulating the `core.sshCommand` git configuration to achieve remote code execution. It automates the process of identifying cloned repositories, setting the malicious configuration, and triggering execution via a git push operation.