Lucene search
Veracode Vulnerability DatabaseVERACODE:35858HistoryJun 03, 2022 - 7:24 a.m.
OS Command Injection
2022-06-0307:24:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
command injection
gogs
windows
repository upload
updaterepofile
ssh access
server
github.com/gogs/gogs is vulnerable to OS command injection. The vulnerability exists only in windows when the repository upload is enabled, allowing an attacker to upload maliciously crafted config file to the UpdateRepoFile function of repo_editor.go and gain SSH access to the server.
Related
osv
osv
OS Command Injection in gogs
2022-06-02 20:50:21
OS Command Injection in gogs in gogs.io/gogs
2024-08-21 15:21:45
gitlab
gitlab
OS Command Injection in gogs
2022-06-02 00:00:00
cve
cve
CVE-2022-1884
2022-06-02 22:56:18
github
github
OS Command Injection in gogs
2022-06-02 20:50:21
Related for VERACODE:35858