CERT24Gogs patches critical zero-day enabling remote code executionLoading data…

Gogs patches critical zero-day enabling remote code execution

Gogs patched a critical zero-day argument-injection vulnerability that can allow attackers to compromise Internet-facing instances and access any repositories, including private ones. The vulnerability affects all Gogs releases up to and including 0.14.2 and 0.15.0+dev.

← Back to intelligence

Gogs patches critical zero-day enabling remote code execution

Gogs patched a critical zero-day argument-injection vulnerability that can allow attackers to compromise Internet-facing instances and access any repositories, including private ones. The vulnerability affects all Gogs releases up to and including 0.14.2 and 0.15.0+dev.