CVE-2018-18925

CVE-2018-18925 Explotación de CVE-2018-18925, una ejecución remota de código contra la herramienta Git autohospedada: Gogs. Gogs se basa en el framework Macaron. El sistema utilizado para gestionar la sesión es muy similar a lo que hace PHP. El identificador de sesión en la cookie se asigna a un...

i18n 输入验证错误漏洞

i18n is a Macaron open source package . It provides internationalization and localization middleware for Macaron applications. An input validation error vulnerability exists in versions of i18n prior to 0.5.0, which stems from a problem with an unknown function in the file i18n.go that results in...

macaron: open redirect in the static handler

A flaw was found in macaron. Path URLs aren't cleaned before being redirected creating an open redirect in the static handler...

macaron input validation error vulnerability

macaron is a modular Web framework based on the Go language . An input validation error vulnerability exists in the static handler in versions prior to macaron 1.3.7. The vulnerability stems from a web system or product that does not properly validate input data. No detailed vulnerability details...

PT-2018-14725 · Go Gitea · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.66 Description: The issue allows remote code execution due to improper validation of session IDs. This can be exploited through a ".." session-file forgery in the file session provider, specifically in the file.go file. The...