CVE-2022-31268: Gitblit

High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days.

A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

Affected products

• Gitblit Gitblit: version 1.9.3 only

Published 2022-05-21. Last modified 2026-06-17.