CVE-2022-1992 - Path Traversal in gogs/gogs

CRITICAL

Path Traversal in gogs/gogs

Published Jun 8, 2022

9.1

CRITICAL

CVSS 3.1

EPSS 2.27%

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<0.12.9

Ecosystem	Package	Introduced	Fixed
Go	gogs.io/gogs	0	0.12.9

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6005		Advisory
https://github.com/advisories/GHSA-994f-7g86-qr56		Advisory
https://github.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129
https://github.com/gogs/gogs/commit/2ca014250fbf0bba94c914d9e43b1f6d8eca3bb0		x_refsource_MISCPatchThird Party Advisory
https://github.com/gogs/gogs/security/advisories/GHSA-994f-7g86-qr56
https://huntr.dev/bounties/2e8cdc57-a9cf-46ae-9088-87f09e6c90ab		x_refsource_CONFIRMExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1992