File overwrite in file update API in Gogs

Gogs: Path Traversal in organization name results in RCE through Git hooks

Gogs: RCE via git rebase --exec argument injection in pull request merge

Gogs through 0.13.0 allows argument injection during the previewing of changes

Gogs through 0.13.0 allows deletion of internal files

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution

Gogs allows unauthenticated file uploads

Gogs's update .git/config file allows remote command execution

Gogs is an open source self-hosted Git service

Gogs has a Path Traversal in file editing UI

A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go

Gogs: Cross-repository LFS object overwrite via missing content hash verification

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5

Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

Gogs: Stored XSS in `.ipynb` Preview

Gogs: CSRF Leading to Organization Owner Takeover

Gogs has a Protected Branch Deletion Bypass in Web Interface

Gogs Vulnerable to 2FA Bypass via Recovery Code

Gogs has a Path Traversal in file update API

Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go

Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6

A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link

Gogs: Migration Redirect Bypass Leads to Internal Repository Theft

In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF

An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services

Gogs: Overwriting critical files results in a denial of service

Gogs: SSRF in webhook deliveries

Gogs: Ability to import local repositories via Mirror Settings

Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9

Gogs: Authentication Bypass via Unvalidated Reverse Proxy Headers

Gogs through 0.13.0 allows argument injection during the tagging of a new release

Gogs: Missing Authorization in Attachment Download

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a…

Gogs: Release tag option injection in release deletion

The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution

Gogs: LFS dedupe path leaks private repo content across tenants

Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

Gogs: Write-level collaborators can mutate admin-only repository settings via API

Gogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES

Gogs Authorization Bypass Allows Cross-Repository Label Modification

Gogs has arbitrary file read/write via path traversal in Git hook editing

Gogs user can update repository content with read-only permission