Description
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/gitblit/gitblit/issues/1410
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/gitblit/gitblit/releases/tag/v1.9.3
Scores
CVSS v3
9.8
EPSS
0.1775
EPSS Percentile
96.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
Status
published
Products (2)
com.gitblit/gitblit
0 - 1.9.3Maven
gitblit/gitblit
1.9.2
Published
May 21, 2022
Tracked Since
Feb 18, 2026