| Package | Affected versions | Patched versions |
|---|---|---|
| gogs.io/gogs | < 0.12.6 | 0.12.6 |
| gogs | < 0.12.6 | 0.12.6 |
The malicious user is able to upload a crafted config file into repository's .git directory with to gain SSH access to the server. All installations with repository upload enabled (default) are affected.
Repository file uploads are prohibited to its .git directory. Users should upgrade to 0.12.6 or the latest 0.13.0+dev.
Disable repository files upload.
https://huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902/
If you have any questions or comments about this advisory, please post on #6833.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free