Vulnerability advisory
GO-2023-1596
Gogs OS Command Injection vulnerability in gogs.io/gogs
Also known as CVE-2022-2024GHSA-pfvh-p8qp-9ww9
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 0.12.11 | 0.12.11 |
Description
Gogs OS Command Injection vulnerability in gogs.io/gogs
References
- Advisorygithub.com/gogs/gogs/security/advisories/GHSA-pfvh-p8qp-9ww9 ↗
- Advisorynvd.nist.gov/vuln/detail/CVE-2022-2024 ↗
- Webgithub.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129 ↗
- Webgithub.com/gogs/gogs/commit/15d0d6a94be0098a8227b6b95bdf2daed105ec41 ↗
- Webgithub.com/gogs/gogs/issues/7030 ↗
- Webhuntr.dev/bounties/18cf9256-23ab-4098-a769-85f8da130f97 ↗