Product · Gogs

gogs/gogs

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Critical 10.0

CVE-2022-1884

Remote Command Execution in gogs/gogs

A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to up…

Gogs gogs/gogs gogs.io/gogs Go

Nov 15, 2024
Critical 9.8

CVE-2022-2024 EPSS 98%

OS Command Injection in gogs/gogs

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.

Gogs gogs/gogs gogs.io/gogs Go

Feb 25, 2023
Critical 10.0

CVE-2022-1986

OS Command Injection in gogs/gogs

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.

Gogs gogs/gogs gogs.io/gogs Go

Jun 9, 2022
Critical 10.0

CVE-2022-1992

Path Traversal in gogs/gogs

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

Gogs gogs/gogs gogs.io/gogs Go

Jun 8, 2022
Critical 9.9

CVE-2022-0415 Scanner template EPSS 66%

Remote Command Execution in uploading repository file in gogs/gogs

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

Gogs gogs/gogs gogs.io/gogs golang-github-gogits-go-gogs-client Ubuntu Go

Mar 21, 2022