writeups.xyz / Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2)

Submitter : c2a

Date: 9 July 2024

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Arbitrary File Delete
• Argument Injection
• Security Code Review

Programs :

• Gogs

Authors :

• Thomas Chauchefoin (@Swapgs)
• Paul Gerste

Link :
https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-2/