Ssourcegraph

Products

Exploited and recent CVEs

• CVE-2023-46248 Critical 9.1 Overwrite of builtin Cody commands facilitates RCE 1.3%
• CVE-2022-41942 High 7.9 Sourcegraph vulnerable to Comand Injection via gitserver 2.8%
• CVE-2022-41943 Critical 9.0 Incorrect default permissions found in Sourcegraph 1.8%
• CVE-2022-31155 Medium 4.3 Unauthorized overwriting of saved searches in Sourcegraph 0.5%
• CVE-2022-31154 Medium 6.4 Indirect Object Access in Sourcegraph Code Monitoring 0.5%
• CVE-2022-29171 Medium 6.6 Remote Code Execution in sourcegraph 1.4%
• CVE-2022-23642 High 8.8 Code Injection in Sourcegraph 74.3%
• CVE-2022-23643 Medium 6.5 Side-channel attack in Sourcegraph Code Monitors 0.8%
• CVE-2021-43823 Medium 6.5 Side-channel attack in Sourcegraph 0.9%
• CVE-2021-32787 Low 3.1 Low risk information disclosure in Sourcegraph 0.6%