{"id":"CVE-2022-38795","published":"2023-08-07T00:00:00Z","modified":"2024-10-17T14:43:49Z","title":"In Gitea through 1.17.1, repo cloning can occur in the migration function","vendor":null,"product":null,"tier":"tail","description":{"text":"In Gitea through 1.17.1, repo cloning can occur in the migration function.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00561,"percentile":0.46533,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/go-gitea/gitea/pull/20869","tags":[]},{"url":"https://github.com/go-gitea/gitea/pull/20892","tags":[]},{"url":"https://blog.gitea.com/release-of-1.17.2/","tags":[]}],"priority":{"score":9.3,"factors":[{"name":"EPSS percentile","points":9.31}]},"affected":[{"ecosystem":"Go","package":"code.gitea.io/gitea","vulnerableRanges":["<1.17.2"],"patched":["1.17.2"],"from":["GHSA-8j3v-68w3-3848","GO-2023-1999"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-2246","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2022-30781","published":"2022-05-16","fixed":"1.16.7","kev":false},{"cve":"CVE-2022-1928","published":"2022-05-29","fixed":"1.16.9","kev":false},{"cve":"CVE-2022-38183","published":"2022-08-12","fixed":"1.16.9","kev":false,"link":{"from":"CVE-2022-38183","to":"CVE-2022-38795","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:code.gitea.io/gitea","fromFixed":"1.16.9","toFixed":"1.17.2","daysApart":360}]}},{"cve":"CVE-2022-38795","published":"2023-08-07","fixed":"1.17.2","kev":false},{"cve":"CVE-2022-42968","published":"2022-10-16","fixed":"1.17.3","kev":false},{"cve":"CVE-2023-3515","published":"2023-07-05","fixed":"1.19.4","kev":false},{"cve":"CVE-2025-68946","published":"2025-12-26","fixed":"1.20.1","kev":false}],"package":"Go:code.gitea.io/gitea"}}