gitblit records
4 published records for vendor gitblit.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2022-31267No exploit | Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as angitblit · gitblit · CWE-269 | Critical9.8 | — | 17.5% | May 21, 2022 |
33Monitor | CVE-2022-31268Proof of concept | A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-Igitblit · gitblit · CWE-22 | High7.5 | — | 10.6% | May 21, 2022 |
24Monitor | CVE-2025-50978No exploit | In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled.gitblit · gitblit · CWE-79 | Medium6.1 | — | 0.2% | Aug 27, 2025 |
24Monitor | CVE-2025-50977No exploit | A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authenticgitblit · gitblit · CWE-79 | Medium6.1 | — | 0.2% | Aug 27, 2025 |
- CVE-2022-3126744Plan
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an
CriticalCVSS 9.8No exploitEPSS 17%gitblit · gitblitMay 21, 2022
- CVE-2022-3126833Monitor
A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-I
HighCVSS 7.5Proof of conceptEPSS 10%gitblit · gitblitMay 21, 2022
- CVE-2025-5097824Monitor
In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled.
MediumCVSS 6.1No exploitEPSS 0%gitblit · gitblitAug 27, 2025
- CVE-2025-5097724Monitor
A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authentic
MediumCVSS 6.1No exploitEPSS 0%gitblit · gitblitAug 27, 2025