CVE-2024-56731

Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instanc...

CVE-2024-56731

creationtimestamp| type| source ---|---|--- 2025-06-24 04:32:30+00:00| published-proof-of-concept| Telegram/xYRYp9RnMrs6asvPZWHHQ0msOulfM9P8474meOJ4G31k98 2025-06-24 04:48:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19309 2025-06-24 05:48:11+00:00| seen|...

CVE-2024-56731

Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instanc...

CVE-2024-56731

Summary: Gogs (self-hosted Git service) contains a remote command execution flaw tied to the .git directory. Prior to version 0.13.3, an insufficient patch for CVE-2024-39931 allowed unprivileged users to delete files inside .git and run arbitrary commands with RUN_USER privileges, enabling acces...