1316 matches found
The vulnerability of the Gogs self-managed Git repository creation software lies in improper code generation management, allowing attackers to execute arbitrary commands.
The vulnerability of the Gogs self-managed Git repository creation software is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Gogs self-managed Git repository creation software lies in its use of files and directories accessible from external parties, allowing a malicious actor to delete or modify any files they wish.
The vulnerability of the Gogs self-managed Git repository creation software relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to delete or modify any files at will...
GO-2024-2969 github.com/gogs/gogs affected by CVE-2024-39930
github.com/gogs/gogs affected by CVE-2024-39930...
GO-2024-2972 Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs
Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs...
GO-2024-2970 Gogs allows deletion of internal files in github.com/gogs/gogs
Gogs allows deletion of internal files in github.com/gogs/gogs...
GO-2024-2971 Gogs allows argument injection during the previewing of changes in github.com/gogs/gogs
Gogs allows argument injection during the previewing of changes in github.com/gogs/gogs...
Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service
Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or wipe source code, and even plant backdoors. The vulnerabilities, according to...
Arbitrary File Deletion
gogs.io/gogs is vulnerable to Arbitrary File Deletion. The vulnerability is due to insufficient access controls, allowing unauthorized users to delete internal files on the host...
Command Injection
gogs.io/gogs is vulnerable to Command Injection. The vulnerability is caused due to inadequate input validation during the previewing of changes, allowing an attacker to inject arbitrary commands...
Remote Code Execution (RCE)
gogs.io/gogs is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of command-line arguments within the bundled ssh implementation internal/ssh/ssh.go. An attacker can exploit the vulnerability by sending a malicious --split-string env request through an SSH...
GHSA-HF29-9HFH-W63J Duplicate Advisory: Gogs allows argument injection during the previewing of changes
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9pp6-wq8c-3w2c. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows argument injection during the previewing of changes...
GHSA-8MM6-WMPP-MMM3 Duplicate Advisory: Gogs allows argument injection during the tagging of a new release
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m27m-h5gj-wwmg. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows argument injection during the tagging of a new release. This vulnerability is still unfixe...
Duplicate Advisory: Gogs allows argument injection during the previewing of changes
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9pp6-wq8c-3w2c. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows argument injection during the previewing of changes...
Duplicate Advisory: Gogs allows argument injection during the tagging of a new release
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m27m-h5gj-wwmg. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows argument injection during the tagging of a new release. This vulnerability is still unfixe...
GHSA-2VGJ-3PVG-XH4W Duplicate Advisory: Gogs allows deletion of internal files
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ccqv-43vm-4f3w. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows deletion of internal files...
GHSA-P69R-V3H4-RJ4F Duplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vm62-9jw3-c8w3. This link is maintained to preserve external references. Original Description The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote co...
Duplicate Advisory: Gogs allows deletion of internal files
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ccqv-43vm-4f3w. This link is maintained to preserve external references. Original Description Gogs through 0.13.0 allows deletion of internal files...
Duplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vm62-9jw3-c8w3. This link is maintained to preserve external references. Original Description The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote co...
