https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:29:00 +0000 https://cve.radiocsirt.org/vuln/cve-2022-1884 <p><strong>Affected:</strong> gogs/gogs, gogs</p> <p>A remote command execution vulnerability exists in gogs/gogs versions &lt;=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution.</p> <p><strong>Affected:</strong> gogs/gogs, gogs</p> <p>A remote command execution vulnerability exists in gogs/gogs versions &lt;=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution.</p> https://cve.radiocsirt.org/vuln/cve-2022-1884