CVE-2022-1884

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the "treepath" parameter during file uploads. An attacker can set "treepath=.git." to upload a file into the .git directory,...

CVE-2022-1884: Improper Neutralization of Special Elements used in an OS Command

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...