Remote Code Execution in Gogs

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-44625 · ADVISORY
• fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs · WEB
• gogs/gogs · PACKAGE
• gogs.io · WEB
• pkg.go.dev/vuln/GO-2024-3275 · WEB
• fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs · Exploit
• gogs.io · Product
• GitHub Advisory GHSA-phm4-wf3h-pc3r · ADVISORY

Lỗ hổng khác của gogs.io/gogs

• GO-2026-5193Gogs: XSS in .ipynb files renderer due to outdated notebookjs in gogs.io/gogs
• CVE-2026-52816TRUNG BÌNH 5.4Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipy…
• CVE-2026-52815TRUNG BÌNH 5.5Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /…
• CVE-2026-52814TRUNG BÌNH 5.5Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymme…
• CVE-2026-52813NGHIÊM TRỌNG 10.0Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted b…