Paper/Archive/CVE-2022-1992

CVE-2022-1992

gogs gogs/gogs — Path Traversal in gogs/gogs

EPSS 2%CVSS 10.0

critical.is priorityof 100

47

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 83.4.834 × 2016.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

Affected

ProductAffectedFixed inSource

gogs/gogsunspecified – < 0.12.90.12.9CNA

Scores by source

@huntrdev (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

refhuntr.dev/bounties/2e8cdc57-a9cf-46ae-9088-87f09e6c90ab refgithub.com/gogs/gogs/commit/2ca014250fbf0bba94c914d9e43b1f6d8eca3bb0