CVE-2022-25766

The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution.

• CWE-88

• https://github.com/FredrikNoren/ungit/blob/master/CHANGELOG.md%231520Broken Link, Release Notes, Third Party Advisory
• https://github.com/FredrikNoren/ungit/pull/1510Exploit, Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-UNGIT-2414099Release Notes, Third Party Advisory
• https://github.com/FredrikNoren/ungit/blob/master/CHANGELOG.md%231520Broken Link, Release Notes, Third Party Advisory
• https://github.com/FredrikNoren/ungit/pull/1510Exploit, Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-UNGIT-2414099Release Notes, Third Party Advisory

Published

Mar 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2576In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.…7.5
• CVE-2022-25760All versions of package accesslog are vulnerable to Arbitrar…9.8
• CVE-2022-25761The package open62541/open62541 before 1.2.5, from 1.3-rc1 a…7.5
• CVE-2022-25762If a web application sends a WebSocket message concurrently …8.6
• CVE-2022-25763Improper Input Validation vulnerability in HTTP/2 request va…7.5
• CVE-2022-25765The package pdfkit from 0.0.0 are vulnerable to Command Inje…9.8
• CVE-2022-25767All versions of package com.bstek.ureport:ureport2-console a…9.8
• CVE-2022-25768The logic in place to facilitate the update process via the …6.5
• CVE-2022-25769ImpactThe default .htaccess file has some restrictions in th…9.1
• CVE-2022-2577A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2022-25770Mautic allows you to update the application via an upgrade s…7.5
• CVE-2022-25772A cross-site scripting (XSS) vulnerability in the web tracki…6.1