CVE-2024-55947
🗓️ 23 Dec 2024 15:26:47Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 203 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 42 |
|---|---|---|---|---|
 | ofensive-playbook | 16 Apr 202616:40 | – | githubexploit |
| ffensive-playbook | 16 Apr 202616:40 | – | githubexploit |
 | Gogs Arbitrary File Write | 9 Jan 202500:00 | – | bdu_fstec |
 | CVE-2024-55947 | 23 Dec 202402:35 | – | circl |
 | Gogs path traversal vulnerability | 23 Dec 202400:00 | – | cnnvd |
 | CVE-2024-55947 Gogs has a Path Traversal in file update API | 23 Dec 202415:26 | – | cvelist |
 | EUVD-2024-3608 | 3 Oct 202520:07 | – | euvd |
 | Path Traversal in file update API in gogs | 23 Dec 202417:53 | – | github |
 | CVE-2024-55947 | 23 Dec 202415:26 | – | mend |
 | Gogs <= 0.13.3 - Remote Code Execution | 5 Nov 202602:03 | – | nuclei |
10
[
{
"vendor": "gogs",
"product": "gogs",
"versions": [
{
"version": "< 0.13.1",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| command | request body | /api/mcp/connect | MCP API command injection via JSON payload in /api/mcp/connect (unsanitized command/args) | CWE-22 |
| args | request body | /api/mcp/connect | MCP API command injection via JSON payload in /api/mcp/connect (unsanitized command/args) | CWE-22 |
| script | request body | /api/v2/hoverfly/middleware | Hoverfly middleware RCE via PUT to /api/v2/hoverfly/middleware by injecting scripts | CWE-22 |
| tid | query param | /zm/index.php?view=request&request=event&action=removetag | Time-based blind SQL injection via tid parameter in ZoneMinder event removal endpoint | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 08:11Current
8High risk
Vulners AI Score8
CVSS 3.18.8
CVSS 48.7
EPSS0.77685
SSVC