CVE-2024-54148

The Gogs open-source self-hosted Git service is vulnerable to a symbolic link handling issue. A malicious user can commit and edit a crafted symlink file to a repository, which can lead to the attacker gaining SSH access to the server. Additionally, exploitation of this interface vulnerability ma...

CVE-2024-54148

creationtimestamp| type| source ---|---|--- 2024-12-23 02:35:45+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-r7j8-5h9c-f6fx 2024-12-23 15:30:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113702851132144066 2024-12-23 18:19:59+00:00| seen|...