Lucene search

K
osvGoogleOSV:CVE-2018-20303
HistoryDec 20, 2018 - 12:29 a.m.

CVE-2018-20303

2018-12-2000:29:00
Google
osv.dev
3

6.7 Medium

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.

Rows per page:
1-10 of 541

6.7 Medium

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%