Unrestricted Upload of File with Dangerous Type in Gogs

HIGH 8.8CVE-2022-0415 · GHSA-5gjh-5j4f-cpwv · GO-2022-0554 · Published 21/03/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
gogs.io/gogs Go	`< 0.12.6`	`0.12.6`
gogs gogs	`< 0.12.6`	`0.12.6`

Description

Impact

The malicious user is able to upload a crafted config file into repository's .git directory with to gain SSH access to the server. All installations with repository upload enabled (default) are affected.

Patches

Repository file uploads are prohibited to its .git directory. Users should upgrade to 0.12.6 or the latest 0.13.0+dev.

Workarounds

Disable repository files upload.

References

https://huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902/

For more information

If you have any questions or comments about this advisory, please post on #6833.

NVD description

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

References

gogs/gogs security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-0415 · ADVISORY
gogs/gogs · WEB
gogs/gogs#6838 · WEB
gogs/gogs commit 0fef3c9 · WEB
gogs/gogs · PACKAGE
huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free