CVE-2024-44625

Description

Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.

Affected Platforms

Weakness Type

CWE-22, CWE-22

References

• https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/
• https://gogs.io/