Lucene search

K
cvelistMitreCVELIST:CVE-2018-20303
HistoryDec 20, 2018 - 12:00 a.m.

CVE-2018-20303

2018-12-2000:00:00
mitre
www.cve.org

8.6 High

AI Score

Confidence

High

0.098 Low

EPSS

Percentile

94.9%

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.

8.6 High

AI Score

Confidence

High

0.098 Low

EPSS

Percentile

94.9%