CVE-2022-25766

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published: Mar 21, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257679.8All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database ser CVE-2022-257686.5The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform th CVE-2022-257699.1ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the roo CVE-2022-25778.8A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of CVE-2022-257707.5Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulner CVE-2022-257726.1A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable CVE-2022-257735.4This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * CVE-2022-257745.4Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. User CVE-2022-257757.2Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user co CVE-2022-257766.5Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from acces CVE-2022-257776.5Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application d CVE-2022-257788.8Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in