SO
Product
sourcegraph
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 6Low 0
Watch
Add sourcegraph to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23642 | 8.8 | Feb 18 | Code Injection in Sourcegraph Affected: < 3.37 |
| CVE-2022-41942 | 7.8 | Nov 22 | Sourcegraph vulnerable to Comand Injection via gitserver Affected: < 4.1.0 |
| CVE-2022-41943 | 7.2 | Nov 22 | Incorrect default permissions found in Sourcegraph Affected: < 4.1.0 |
| CVE-2022-29171 | 7.2 | May 5 | Remote Code Execution in sourcegraph Affected: < 3.38.0 |
| CVE-2022-23643 | 6.5 | Feb 15 | Side-channel attack in Sourcegraph Code Monitors Affected: >= 3.35, < 3.35.2; >= 3.36, < 3.36.3 |
| CVE-2021-43823 | 6.5 | Dec 13 | Side-channel attack in Sourcegraph Affected: < 3.33.2 |
| CVE-2020-12283 | 6.1 | Apr 30 | Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the… Affected: before 3.15.1 |
| CVE-2022-31155 | 4.3 | Aug 1 | Unauthorized overwriting of saved searches in Sourcegraph Affected: < 3.41.0 |
| CVE-2022-31154 | 4.3 | Aug 1 | Indirect Object Access in Sourcegraph Code Monitoring Affected: < 3.42 |
| CVE-2021-32787 | 4.3 | Aug 2 | Low risk information disclosure in Sourcegraph Affected: < 3.30.0 |
Showing 10