Lucene search
Veracode Vulnerability DatabaseVERACODE:7683HistoryNov 05, 2018 - 1:57 a.m.
Remote Code Execution (RCE)
2018-11-0501:57:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.098 Low
EPSS
Percentile
94.9%
github.com/gogs/gogs is vulnerable to remote code execution (RCE) attacks. The vulnerability exists due to the ability to forge a session-file in file.go, allowing unauthenticated users to obtain an admin session, and subsequently allowing remote code to be injected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gogs/gogs | eq | HEAD | |
| github.com/gogs/gogs | le | 0.11.66 |
Related
openvas
openvas
Gogs < 0.11.79 Multiple Vulnerabilities
2018-11-13 00:00:00
cvelist
cvelist
CVE-2018-18925
2018-11-04 06:00:00
CVE-2018-20303
2018-12-20 00:00:00
prion
prion
Design/Logic Flaw
2018-11-04 05:29:00
Directory traversal
2018-12-20 00:29:00
cve
cve
CVE-2018-18925
2018-11-04 06:00:00
CVE-2018-20303
2018-12-20 00:29:00
CVE-2018-1000853
2022-10-03 16:21:59
nuclei
nuclei
Gogs (Go Git Service) 0.11.66 - Remote Code Execution
2022-02-09 20:40:54
osv
osv
CVE-2018-18925
2018-11-04 05:29:00
CVE-2018-20303
2018-12-20 00:29:00
nvd
nvd
CVE-2018-18925
2018-11-04 05:29:00
CVE-2018-20303
2018-12-20 00:29:00
CVE-2018-1000853
2018-12-06 17:15:08
github
github
Gogs Directory Traversal
2022-05-14 01:37:52