Vulnerabilidades em Gerrit

6 resultados

Análise Vexday

Gerrit apresenta um footprint reduzido de 3 CVEs sem incidentes de exploração ativa documentada. A fraqueza dominante concentra-se em controle de acesso (CWE-285), com 1 vulnerabilidade publicada nos últimos 90 dias, indicando risco moderado e monitoramento contínuo necessário.

CVE-2020-8920LOWOveroptimization leads to private information leak in GerritEPSS 0.4%CVE-2026-87721HIGHDenial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code ReviewEPSS 0.3%CVE-2026-87722HIGHRegular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code ReviewEPSS 0.3%CVE-2020-8919LOWInformation leakage in GerritEPSS 0.3%CVE-2026-87720HIGHIncorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code ReviewEPSS 0.3%CVE-2026-2725MEDIUMImproper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"EPSS 0.1%