GO-2022-0554 Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs...

GO-2022-0556 OS Command Injection in file editor in Gogs in gogs.io/gogs

OS Command Injection in file editor in Gogs in gogs.io/gogs...

GO-2022-0566 SSRF in repository migration in gogs.io/gogs

SSRF in repository migration in gogs.io/gogs...

GO-2022-0483 Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs...

GO-2022-0471 OS Command Injection in gogs in gogs.io/gogs

OS Command Injection in gogs in gogs.io/gogs...

GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...

GO-2023-1972 Gogs XSS Vulnerability in gogs.io/gogs

Gogs XSS Vulnerability in gogs.io/gogs...

GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea...

GO-2023-1596 Gogs OS Command Injection vulnerability in gogs.io/gogs

Gogs OS Command Injection vulnerability in gogs.io/gogs...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing a hacker to execute arbitrary commands.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of exploiting or modifying arguments, allowing a perpetrator to disclose protected information.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...

The vulnerability of the Gogs self-managed Git repository creation software lies in improper code generation management, allowing attackers to execute arbitrary commands.

The vulnerability of the Gogs self-managed Git repository creation software is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Gogs self-managed Git repository creation software lies in its use of files and directories accessible from external parties, allowing a malicious actor to delete or modify any files they wish.

The vulnerability of the Gogs self-managed Git repository creation software relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to delete or modify any files at will...

GO-2024-2969 github.com/gogs/gogs affected by CVE-2024-39930

github.com/gogs/gogs affected by CVE-2024-39930...

GO-2024-2970 Gogs allows deletion of internal files in github.com/gogs/gogs

Gogs allows deletion of internal files in github.com/gogs/gogs...

GO-2024-2972 Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs

Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs...

GO-2024-2971 Gogs allows argument injection during the previewing of changes in github.com/gogs/gogs

Gogs allows argument injection during the previewing of changes in github.com/gogs/gogs...

Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or wipe source code, and even plant backdoors. The vulnerabilities, according to...

Arbitrary File Deletion

gogs.io/gogs is vulnerable to Arbitrary File Deletion. The vulnerability is due to insufficient access controls, allowing unauthorized users to delete internal files on the host...

Command Injection

gogs.io/gogs is vulnerable to Command Injection. The vulnerability is caused due to inadequate input validation during the previewing of changes, allowing an attacker to inject arbitrary commands...