Description
Gogs through 0.13.0 allows deletion of internal files.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/gogs/gogs | all versions | — | GO-2024-2970 |
| Go | gogs.io/gogs | < 0.13.1 | 0.13.1 | GHSA-ccqv-43vm-4f3w |
Critical · 9.9
CVE-2024-39931
EUVD-2024-3577GHSA-2vgj-3pvg-xh4wGHSA-ccqv-43vm-4f3wGO-2024-2970
Gogs allows deletion of internal files
Published Jul 4, 2024 · Updated Aug 2, 2024 · Assigned by mitre