Gogs allows deletion of internal files which leads to remote command execution

Summary Due to the insufficient patch for the CVE-2024-39931, it's still possible to delete files under the .git directory and achieve remote command execution. Details In the patch for CVE-2024-39931, the following check is added:...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...