CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39933

Gogs through 0.13.0 allows argument injection during the tagging of a new release...

CVE-2024-39930

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated...

CVE-2024-39932: Improper Control of Generation of Code

Gogs through 0.13.0 allows argument injection during the previewing of changes...

CVE-2024-39933: Improper Neutralization of Argument Delimiters in a Command

Gogs through 0.13.0 allows argument injection during the tagging of a new release...

CVE-2024-39931: Files or Directories Accessible to External Parties

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

CVE-2024-39933

CVE-2024-39933 affects the Gogs project (up to version 0.13.0). The issue is described as argument injection during the tagging of a new release, with a known patching path: upgrade to 0.13.1 or the latest 0.14.0+dev to mitigate. The connected advisories corroborate this as a Gogs vulnerability a...

CVE-2024-39932

CVE-2024-39932 (Gogs) : Gogs

CVE-2024-39931

CVE-2024-39931 affects Gogs (up to version 0.13.0). The vulnerability allows deletion of files under the .git directory, enabling remote command execution with the RUN_USER privileges. Impact is described as unprivileged users being able to access and alter code hosted on the same instance. Publi...

CVE-2024-39933

Gogs through 0.13.0 allows argument injection during the tagging of a new release...

CVE-2024-39933

Gogs through 0.13.0 allows argument injection during the tagging of a new release...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39930

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated...

Gogs Security Breach

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs version 0.13.0 and earlier...

CVE-2024-39933

Gogs through 0.13.0 allows argument injection during the tagging of a new release...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

CVE-2024-39930

CVE-2024-39930 affects the built-in SSH server in Gogs up to version 0.13.0, where argument injection in internal/ssh/ssh.go can lead to remote code execution when an authenticated user opens an SSH session and sends a malicious --split-string env request (Windows builds are unaffected). Public d...