GO-2024-2969

vendorUSosv

github.com/gogs/gogs affected by CVE-2024-39930

view advisory published 2024-07-09Licence: per source

github.com/gogs/gogs affected by CVE-2024-39930

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-39930UScritical9.9Exploit
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by openi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan