4 matches found
CVE-2022-2024
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...
9.8CVSS7.1AI score0.97839EPSS
SaveExploits1References1
CVE-2022-2024 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...
9.8CVSS10AI score0.97839EPSS
SaveExploits1References2
CVE-2022-2024 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...
9.8CVSS9.7AI score0.97839EPSS
SaveExploits1References2
CVE-2022-2024
Vulnerability summary (CVE-2022-2024) : Gogs (gogs/gogs) versions prior to 0.12.11 are affected by an OS Command Injection in the repository file upload path. The issue arises when a crafted config file is placed into a repository’s .git directory during uploads, enabling remote command execution...
9.8CVSS9.7AI score0.97839EPSS
SaveExploits1References2Affected Software1
20