CVE-2024-55947

Katalog CVE

CVSS 8.8 · High EPSS 77,8%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada gogs. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.

Rincian

Terbit di NVD

23 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

77,8% peluang dieksploitasi; lebih tinggi dari 99,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg exploit · advisory vendor
• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41 patch
• https://github.com/gogs/gogs/pull/7859 patch
• https://github.com/gogs/gogs/issues/7582 issue tracking