EUVD-2026-40038
GHSA-29f2-r2fr-hjv6
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable via authenticated account (PR:L); SSRF enables internal service probing (C:L) and potential side-effecting requests to internal APIs (I:L); no direct availability impact.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The patch is named 487a9b980f56aa73b6a044b1e86a92eed5043215. To fix this issue, it is recommended to deploy a patch.
AnalysisAI
Server-side request forgery in GitBucket up to version 4.46.1 allows authenticated users to coerce the application server into issuing HTTP requests to arbitrary internal or private network hosts by supplying a crafted URL to the repository creation "clone from existing repository" feature. The flaw resides in Git.cloneRepository.setURI() within RepositoryCreationService.scala, where user-supplied URL input reaches JGit without validation against private address ranges. A public exploit exists (GitHub issue #4044), though no CISA KEV listing is present - no confirmed active exploitation at time of analysis. An upstream patch is available as commit 487a9b980f56aa73b6a044b1e86a92eed5043215 via PR #4056.
Technical ContextAI
GitBucket is a self-hosted Git platform written in Scala, running on the JVM. The affected code path is the 'COPY' initialization option during repository creation, which invokes JGit's Git.cloneRepository.setURI() with a user-controlled url argument from RepositoryCreationService.scala. CWE-918 (Server-Side Request Forgery) describes the root cause exactly: the application acts as a network proxy on behalf of attacker-controlled input with no denylist or allowlist enforcement for private RFC-1918 address space. The CPE string (cpe:2.3:a:n/a:gitbucket:*:*:*:*:*:*:*:*) confirms all GitBucket versions up to and including 4.46.1 are affected. The fix, visible in PR #4056, extends the pre-existing webHook.blockPrivateAddress + IP-range whitelist controls - previously scoped only to outbound webhook requests - to also apply to repository-clone source URLs. The settings UI was simultaneously relabeled from 'Web hook' to 'Outbound requests' to reflect the broader scope of the control.
RemediationAI
Apply the upstream patch commit 487a9b980f56aa73b6a044b1e86a92eed5043215 from PR #4056 (https://github.com/gitbucket/gitbucket/pull/4056); a specific released version incorporating this fix is not independently confirmed - verify against the official GitBucket release page. As a compensating control prior to patching, administrators should enable the 'Block private address' outbound request setting in GitBucket's admin panel under System Settings > Outbound requests, and configure an IP whitelist limited to legitimate external clone sources - this setting now covers both webhooks and repository cloning after the patch, but may already exist in pre-patch versions for webhooks only. Disabling the 'Create repository by cloning' feature entirely via access control policy eliminates the attack surface with no impact on standard git operations. Network-level egress filtering on the GitBucket host to block RFC-1918 ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and link-local addresses (169.254.0.0/16) provides defense-in-depth but does not remove the vulnerability.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today