CVE List

CVE-2022-41943

Critical 7.2

sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental `customGitFetch` feature was enabled. This experimental feature has now been disabled by default. This issue has been patched in version 4.1.0.

Published November 22, 2022.

Affected software

Get alerts for Sourcegraph Sourcegraph

Reference links