{"metadata": {"vulnerability": "CVE-2022-23642", "count": 23, "kinds": {"milestone": 3, "sighting": 8, "kev": 0, "other": 12}}, "data": [{"timestamp": "2022-01-19T00:00:00Z", "date_only": false, "value": "2022-01-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-23642", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-18T22:15:11Z", "date_only": false, "value": "2022-02-18T22:15:11.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-23642", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-18T23:15:00Z", "date_only": false, "value": "2022-02-18T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-23642", "record": "GSD-2022-23642", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-18T23:15:09.697Z", "date_only": false, "value": "2022-02-18T23:15:09.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23642", "record": "FKIE_CVE-2022-23642", "field": "published"}, {"timestamp": "2022-02-19T02:38:45Z", "date_only": false, "value": "2022-02-19T02:38:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37810", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "bf784d0b-98e0-4244-bee3-c25489578a59", "content": "\u203c CVE-2022-23642 \u203c\n\nSourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an attacker to set the git `core.sshCommand` option, which sets git to use the specified command instead of ssh when they need to connect to a remote system. Exploitation of this vulnerability depends on how Sourcegraph is deployed. An attacker able to make HTTP requests to internal services like gitserver is able to exploit it. This issue is patched in Sourcegraph version 3.37. As a workaround, ensure that requests to gitserver are properly protected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37810"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": true, "value": "2022-02-22", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-13375", "record": "CNVD-2022-13375", "field": "submitTime"}, {"timestamp": "2022-02-23T00:00:00Z", "date_only": true, "value": "2022-02-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-13375", "record": "CNVD-2022-13375", "field": "openTime"}, {"timestamp": "2022-06-12T13:48:14Z", "date_only": false, "value": "2022-06-12T13:48:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6186", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "f7944e9f-0e66-44b2-8ca3-0cd3be3d0d01", "content": "#exploit\n1. CVE-2022-23642:\nPoC for Sourcegraph Gitserver < 3.37 RCE\nhttps://github.com/Altelus1/CVE-2022-23642\n\n2. CVE-2022-24806/CVE-2022-24807:\nUnauthenticated RCE vulnerability in Magento and Adobe Commerce\nhttps://github.com/oturu/CVE-2022-24806-MASS-RCE", "url": "https://t.me/CyberSecurityTechnologies/6186"}, {"timestamp": "2022-06-12T23:09:17Z", "date_only": false, "value": "2022-06-12T23:09:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/218", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "faba4eba-2529-4542-b86a-4ced242d31ca", "content": "CVE-2022-23642 : Sourcegraph Gitserver < 3.37 RCE\nhttps://github.com/Altelus1/CVE-2022-23642", "url": "https://t.me/MrVGunz/218"}, {"timestamp": "2022-06-13T03:16:30Z", "date_only": false, "value": "2022-06-13T03:16:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/685", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "112a7c36-bad9-4953-a5c2-2e49b24449ec", "content": "\u200bCVE-2022-23642\n\nPoC for Sourcegraph Gitserver 3.37.0 RCE\n\nSourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus \"core.sshCommand\" can be passed on the HTTP arguments which can contain arbitrary bash commands. Note that this is only possible if gitserver is exposed to the attacker.\n\nhttps://github.com/Altelus1/CVE-2022-23642\n\nResearch:\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23642\n\n#exploit #cve", "url": "https://t.me/crackcodes/685"}, {"timestamp": "2022-06-13T03:23:07Z", "date_only": false, "value": "2022-06-13T03:23:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ip3Gh0poW8tdMG07iwidHvLEgfZ4cxE7wfqyPu63vqdGfw", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "1a5c4ad2-c340-47dd-b5cd-f1bd261f0c0f"}, {"timestamp": "2022-07-13T14:37:15Z", "date_only": false, "value": "2022-07-13T14:37:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sourcegraph_gitserver_sshcmd.rb", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "8311c476-fd8f-4ee4-8cb9-9341cda670eb", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sourcegraph_gitserver_sshcmd.rb"}, {"timestamp": "2022-07-13T18:06:13Z", "date_only": false, "value": "2022-07-13T18:06:13.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2022-23642", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-27T19:01:00Z", "date_only": false, "value": "2023-06-27T19:01Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-23642", "record": "GSD-2022-23642", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:35.738Z", "date_only": false, "value": "2023-12-13T01:19:35.738286Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-23642", "record": "GSD-2022-23642", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T03:51:45.396Z", "date_only": false, "value": "2024-08-03T03:51:45.396Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-23642", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "fcf1f073-06f3-4d97-af9e-2bb3089ef97b"}, {"timestamp": "2025-02-23T04:10:44Z", "date_only": false, "value": "2025-02-23T04:10:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-23642", "field": "creation_timestamp", "uuid": "4203c863-8b8c-4f7d-87d8-eebb9f2930cb"}, {"timestamp": "2025-04-22T15:44:24.013Z", "date_only": false, "value": "2025-04-22T15:44:24.013601Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23642", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-22T15:44:24.013Z", "date_only": false, "value": "2025-04-22T15:44:24.013601Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23642", "record": "FKIE_CVE-2022-23642", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-22T18:21:53.481Z", "date_only": false, "value": "2025-04-22T18:21:53.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-23642", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-22T18:21:53.481Z", "date_only": false, "value": "2025-04-22T18:21:53.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23642", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:30:32.820Z", "date_only": false, "value": "2026-06-17T04:30:32.820", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23642", "record": "FKIE_CVE-2022-23642", "field": "lastModified"}]}