Approved changes feed: RSS · Atom
cpe:2.3:a:gogs:gogs/gogs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gogs (a04c63ac-1e9b-5f4c-8a30-1ff12e0e81c4) |
|---|---|
| Product | Gogs/Gogs (346c6abf-a9b6-574b-8647-7c6cbf06577b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2024 |
vulnerable | 2026-06-08 05:42:50.070495 |
OS Command Injection in gogs/gogs
CRITICAL (9.8)
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.
Published: 2023-02-25T00:00:00.000Z
Updated: 2025-03-11T15:39:29.120Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1993 |
vulnerable | 2026-06-08 05:39:14.335146 |
Path Traversal in gogs/gogs
HIGH (8.1)
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.
Published: 2022-06-08T13:55:11.000Z
Updated: 2024-08-03T00:24:44.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1992 |
vulnerable | 2026-06-08 05:39:14.334772 |
Path Traversal in gogs/gogs
CRITICAL (10)
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.
Published: 2022-06-08T13:30:14.000Z
Updated: 2024-08-03T00:24:43.718Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1986 |
vulnerable | 2026-06-08 05:39:14.325866 |
OS Command Injection in gogs/gogs
CRITICAL (10)
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.
Published: 2022-06-09T03:35:11.000Z
Updated: 2024-08-03T00:24:44.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1884 |
vulnerable | 2026-06-08 05:39:14.058167 |
Remote Command Execution in gogs/gogs
CRITICAL (10)
A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution.
Published: 2024-11-15T10:53:00.844Z
Updated: 2024-11-15T19:15:02.353Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1464 |
vulnerable | 2026-06-08 05:39:13.192585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1285 |
vulnerable | 2026-06-08 05:39:12.616500 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0871 |
vulnerable | 2026-06-08 05:39:11.388968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0870 |
vulnerable | 2026-06-08 05:39:11.388612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0415 |
vulnerable | 2026-06-08 05:39:09.999628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.