Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/gogs/gogs ↗ | |
| All commits through 8c21874c00b6100d46b662f65baeb40647442f42 | No fix listed |
Also listed as affected (55)
| |
Description
Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.