Lucene search
+L

1316 matches found

SUSE CVE
SUSE CVE
•added 2024/11/21 3:54 a.m.•8 views

SUSE CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS7AI score0.16502EPSS
SaveExploits2References3
OSV
OSV
•added 2024/11/19 5:20 p.m.•15 views

GO-2024-3275 Unpatched Remote Code Execution in Gogs in gogs.io/gogs

Unpatched Remote Code Execution in Gogs in gogs.io/gogs...

8.8CVSS8.9AI score0.16502EPSS
SaveExploits2References3
Github Security Blog
Github Security Blog
•added 2024/11/15 6:30 p.m.•40 views

Remote Code Execution in Gogs

Gogs 0.13.2 is vulnerable to symbolic link path traversal that enables remote code execution via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS9.6AI score0.16502EPSS
SaveExploits2References5Affected Software1
OSV
OSV
•added 2024/11/15 6:30 p.m.•18 views

GHSA-PHM4-WF3H-PC3R Remote Code Execution in Gogs

Gogs 0.13.2 is vulnerable to symbolic link path traversal that enables remote code execution via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS9.6AI score0.16502EPSS
SaveExploits2References5
NVD
NVD
•added 2024/11/15 5:15 p.m.•29 views

CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS0.16502EPSS
SaveExploits2References2
AlpineLinux
AlpineLinux
•added 2024/11/15 5:15 p.m.•61 views

CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

6.9AI score0.16502EPSS
SaveExploits2
NVD
NVD
•added 2024/11/15 11:15 a.m.•32 views

CVE-2022-1884

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS0.01841EPSS
SaveExploits1References1
EUVD
EUVD
•added 2024/11/15 10:53 a.m.•13 views

EUVD-2022-6003

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS9.5AI score0.01841EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2024/11/15 10:53 a.m.•319 views

CVE-2022-1884 Remote Command Execution in gogs/gogs

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS0.01841EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/15 10:53 a.m.•22 views

CVE-2022-1884 Remote Command Execution in gogs/gogs

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS7.1AI score0.01841EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/15 10:53 a.m.•15 views

CVE-2022-1884 Remote Command Execution in gogs/gogs

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS7.4AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•14 views

Gogs 安全漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs 0.13.0 and earlier versions, whi...

8.8CVSS9.2AI score0.16502EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/11/15 12:00 a.m.•46 views

CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

0.16502EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•18 views

Gogs 操作系统命令注入漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. An operating system command injection vulnerability exists in Gogs 0.12....

10CVSS9.5AI score0.01841EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•1 views

CVE-2024-44625: Improper Limitation of a Pathname to a Restricted Directory

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS7.8AI score0.16502EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•2 views

CVE-2022-1884: Improper Neutralization of Special Elements used in an OS Command

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

10CVSS8.3AI score0.01841EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/15 12:00 a.m.•96 views

CVE-2024-44625

Gogs

8.8CVSS8.1AI score0.16502EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/15 12:00 a.m.•12 views

CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

6.8AI score0.16502EPSS
SaveExploits2References2
OSV
OSV
•added 2024/11/15 12:00 a.m.•17 views

CVE-2024-44625

Gogs =0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go...

8.8CVSS8.6AI score
SaveExploits0References4
FreeBSD
FreeBSD
•added 2024/11/15 12:00 a.m.•16 views

gogs -- Multiple vulnerabilities

[email protected] reports: CVE-2024-44625: Directory Traversal via the editFilePost function of internal/route/repo/editor.go. CVE-2024-39933: Gogs allows argument injection during the tagging of a new release. CVE-2024-39932: Gogs allows argument injection during the previewing of changes...

9.9CVSS7.6AI score0.52658EPSS
SaveExploits7References5
Rows per page
Query Builder