What is GHSA-9pp6-wq8c-3w2c?

GHSA-9pp6-wq8c-3w2c is a security advisory published by GitHub Security Advisories with Critical severity. Gogs allows argument injection during the previewing of changes

Which CVE IDs does GHSA-9pp6-wq8c-3w2c cover?

GHSA-9pp6-wq8c-3w2c covers the following CVE IDs: CVE-2024-39932. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9pp6-wq8c-3w2c?

GHSA-9pp6-wq8c-3w2c has a CVSS v3 base score of 9.9, published by GitHub Security Advisories.

Which products are affected by GHSA-9pp6-wq8c-3w2c?

GHSA-9pp6-wq8c-3w2c affects 1 product, including: go/gogs.io/gogs:\u003c= 0.13.0.

GHSA-9pp6-wq8c-3w2cCriticalCVSS 9.9

Gogs allows argument injection during the previewing of changes

Vendor

GitHub Security Advisories

Published

December 23, 2024

Last Modified

December 23, 2024

🔗 CVE IDs covered (1)

CVE-2024-39932 →

📋 Description

Impact

Unprivileged user accounts can write to arbitrary files on the filesystem. We could demonstrate its exploitation to force a re-installation of the instance, granting administrator rights. It allows accessing and altering any user's code hosted on the same instance.

Patches

Unintended Git options has been ignored for diff preview (https://github.com/gogs/gogs/pull/7871). Users should upgrade to 0.13.1 or the latest 0.14.0+dev.

Workarounds

No viable workaround available, please only grant access to trusted users to your Gogs instance on affected versions.

References

https://www.cve.org/CVERecord?id=CVE-2024-39932

🎯 Affected products1

go/gogs.io/gogs:<= 0.13.0

🔗 References (4)

https://github.com/gogs/gogs/security/advisories/GHSA-9pp6-wq8c-3w2c
https://nvd.nist.gov/vuln/detail/CVE-2024-39932
https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1
https://github.com/advisories/GHSA-9pp6-wq8c-3w2c