Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-20303
HistoryDec 20, 2018 - 12:29 a.m.

Directory traversal

2018-12-2000:29:00
PRIOn knowledge base
www.prio-n.com
1

8.5 High

AI Score

Confidence

High

0.098 Low

EPSS

Percentile

94.9%

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.

CPENameOperatorVersion
gogslt0.11.82.1218

8.5 High

AI Score

Confidence

High

0.098 Low

EPSS

Percentile

94.9%