1316 matches found
CVE-2022-1986
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Path traversal
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Command injection
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Path traversal
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
Design/Logic Flaw
Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 DisplayName does not filter characters input from users, which leads to an XSS vulnerability when directly displayed in the issue list. This issue has been resolved in commit 155cae1d which sanitizes DisplayName...
CVE-2022-1986
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-31038
Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 DisplayName does not filter characters input from users, which leads to an XSS vulnerability when directly displayed in the issue list. This issue has been resolved in commit 155cae1d which sanitizes DisplayName...
Path Traversal
gogs.io/gogs is vulnerable to path traversal. The vulnerability exists in Clean function in pathutil.go due to lack of validations which allows a malicious attacker to delete and upload arbitrary files...
Cross-Site Scripting (XSS)
gogs.io/gogs is vulnerable to cross-site scripting. The vulnerability exists in list.tmpl because the DisplayName is not properly sanitized which allows an attacker to inject and execute arbitrary javascript...
OS Command Injection
gogs.io/gogs is vulnerable to OS command injection. The vulnerability exists in isRepositoryGitPath function in repoeditor.go because the styles of os.PathSeparator are not checked properly which allows an attacker to inject and execute os commands...
Path Traversal
github.com/gogs/gogs is vulnerable to path traversal. The vulnerability exists in the HTTP function in http.go due to a lack of input validation which allows a malicious user to craft an http request and gain access to unauthorized system data...
CVE-2022-1986 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1986
CVE-2022-1986 concerns the Go-Gogs Git service (gogs/gogs) prior to 0.12.9. Multiple sources report an OS command injection vulnerability in the file editor component of Gogs, enabling an attacker to inject and execute commands through the editor facility. The issue is described across multiple f...
CVE-2022-1986 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
Gogs 路径遍历漏洞
Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. A security vulnerability exists in Gogs versions prior to 0.12.9, which stems from a path...
Gogs 跨站脚本漏洞
Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A cross-site scripting vulnerability exists in Gogs versions prior to...
