Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS02N214LWpjMmYtamdqbc4AArcq
OS Command Injection in file editor in Gogs
Impact
The malicious user is able to update a crafted config
file into repository's .git
directory in combination with crafted file deletion to gain SSH access to the server. All installations with repository upload enabled (default) are affected.
Patches
File deletions are prohibited to repository's .git
directory. Users should upgrade to 0.12.9 or the latest 0.13.0+dev.
Workarounds
N/A
References
https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930/
For more information
If you have any questions or comments about this advisory, please post on #7000.
Permalink: https://github.com/advisories/GHSA-67mx-jc2f-jgjmJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02N214LWpjMmYtamdqbc4AArcq
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago
CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-67mx-jc2f-jgjm, CVE-2022-1986
References:
- https://github.com/gogs/gogs/security/advisories/GHSA-67mx-jc2f-jgjm
- https://github.com/gogs/gogs/commit/38aff73251cc46ced96dd608dab6190415032a82
- https://github.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129
- https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930/
- https://nvd.nist.gov/vuln/detail/CVE-2022-1986
- https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930
- https://github.com/advisories/GHSA-67mx-jc2f-jgjm
Blast Radius: 0.0
Affected Packages
go:gogs.io/gogs
Dependent packages: 2Dependent repositories: 1
Downloads:
Affected Version Ranges: < 0.12.9
Fixed in: 0.12.9
All affected versions: 0.2.0, 0.3.0, 0.3.1, 0.4.0, 0.4.1, 0.4.2, 0.5.0, 0.5.2, 0.5.5, 0.5.8, 0.5.9, 0.5.11, 0.5.13, 0.6.0, 0.6.1, 0.6.3, 0.6.5, 0.6.9, 0.6.15, 0.7.0, 0.7.6, 0.7.19, 0.7.22, 0.7.33, 0.8.0, 0.8.10, 0.8.25, 0.8.43, 0.9.0, 0.9.13, 0.9.46, 0.9.48, 0.9.60, 0.9.71, 0.9.97, 0.9.113, 0.9.128, 0.9.141, 0.10.1, 0.10.8, 0.10.18, 0.11.4, 0.11.19, 0.11.29, 0.11.33, 0.11.34, 0.11.43, 0.11.53, 0.11.66, 0.11.79, 0.11.86, 0.11.91, 0.12.0, 0.12.1, 0.12.2, 0.12.3, 0.12.4, 0.12.5, 0.12.6, 0.12.7, 0.12.8
All unaffected versions: 0.12.9, 0.12.10, 0.12.11, 0.13.0