PT-2022-14238 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: gogs/gogs versions prior to 0.12.9 Description: The issue allows a malicious user to update a crafted config file into the repository's .git directory, combined with crafted file deletion, to gain SSH access to the server. This affects all...

PT-2022-10085 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs versions prior to 0.12.8 Description: The issue is caused by missing input validation in internal/db/repo editor.go, allowing an attacker to execute code remotely. An unprivileged attacker can overwrite the Git configuration in their...