{"action":"Upgrade code.gitea.io/gitea to 1.16.7 or later.","affected":[{"fixed":"1.16.7","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-30781"],"ecosystem":"Go","epss":0.8793,"exploited":false,"fixed_versions":["1.16.7"],"ghsa_id":"GHSA-p5f9-c9j9-g8qx","id":"tcs_01M5KFGWTMCZEW33A89AAF3HR3","modified_at":"2024-08-21T15:26:58.146441Z","published_at":"2022-05-17T00:01:46Z","references":["https://osv.dev/vulnerability/GHSA-p5f9-c9j9-g8qx","https://nvd.nist.gov/vuln/detail/CVE-2022-30781","https://github.com/go-gitea/gitea/pull/19487","https://github.com/go-gitea/gitea/pull/19490","https://blog.gitea.io/2022/05/gitea-1.16.7-is-released","https://github.com/go-gitea/gitea","http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html","http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p5f9-c9j9-g8qx","url":"https://osv.dev/vulnerability/GHSA-p5f9-c9j9-g8qx"}],"summary":"Shell command injection in gitea"}