Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35924
HistoryJun 09, 2022 - 7:55 a.m.

Path Traversal

2022-06-0907:55:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

39.6%

gogs.io/gogs is vulnerable to path traversal. The vulnerability exists in Clean function in pathutil.go due to lack of validations which allows a malicious attacker to delete and upload arbitrary files.

0.001 Low

EPSS

Percentile

39.6%