← All advisories

High severityNVD Advisory· Published Mar 21, 2022· Updated Aug 2, 2024

Remote Command Execution in uploading repository file in gogs/gogs

CVE-2022-0415

Description

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gogs.io/gogsGo	< 0.12.6	0.12.6

Affected products

2

ghsa-coords
pkg:golang/gogs.io/gogs
Range: < 0.12.6
Gogs/Gogscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-5gjh-5j4f-cpwvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0415ghsaADVISORY
github.com/gogs/gogs/commit/0fef3c9082269e9a4e817274942a5d7c50617284ghsax_refsource_MISCWEB
github.com/gogs/gogs/issues/6833ghsaWEB
github.com/gogs/gogs/pull/6838ghsaWEB
github.com/gogs/gogs/security/advisories/GHSA-5gjh-5j4f-cpwvghsaWEB
huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.