What is GHSA-pfvh-p8qp-9ww9?

GHSA-pfvh-p8qp-9ww9 is a security advisory published by GitHub Security Advisories with Critical severity. Gogs OS Command Injection vulnerability

Which CVE IDs does GHSA-pfvh-p8qp-9ww9 cover?

GHSA-pfvh-p8qp-9ww9 covers the following CVE IDs: CVE-2022-2024. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pfvh-p8qp-9ww9?

GHSA-pfvh-p8qp-9ww9 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-pfvh-p8qp-9ww9?

GHSA-pfvh-p8qp-9ww9 affects 1 product, including: go/gogs.io/gogs:\u003c 0.12.11.

GHSA-pfvh-p8qp-9ww9CriticalCVSS 9.8

Gogs OS Command Injection vulnerability

Vendor

GitHub Security Advisories

Published

February 28, 2023

Last Modified

March 9, 2023

🔗 CVE IDs covered (1)

CVE-2022-2024 →

📋 Description

Impact

The malicious user is able to update a crafted config file into repository's .git directory in combination with crafted file deletion to gain SSH access to the server on case-insensitive file systems. All installations with repository upload enabled (default) on case-insensitive file systems (Windows, macOS, etc.) are affected.

Patches

Make sanitization of upload path to .git directory to be case-insensitive. Users should upgrade to 0.12.11 or the latest 0.13.0+dev.

Workarounds

Disable repository upload.

References

https://huntr.dev/bounties/18cf9256-23ab-4098-a769-85f8da130f97/

For more information

If you have any questions or comments about this advisory, please post on https://github.com/gogs/gogs/issues/7030.

🎯 Affected products1

go/gogs.io/gogs:< 0.12.11