#git-rebase

[ follow ]
#gogs #remote-code-execution #zero-day #cve #security-vulnerability #cvss
#gogs
fromSecurityWeek
14 hours ago
Information security

Gogs Zero-Day Exposes Servers to Remote Code Execution

Authenticated attackers can exploit an argument injection flaw in Gogs pull-request rebasing to achieve remote code execution as the Gogs server user.
fromThe Hacker News
1 day ago
Information security

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Authenticated users can trigger remote code execution in Gogs by creating a pull request with a malicious branch name that injects --exec into git rebase.
Information security
fromSecurityWeek
14 hours ago

Gogs Zero-Day Exposes Servers to Remote Code Execution

Authenticated attackers can exploit an argument injection flaw in Gogs pull-request rebasing to achieve remote code execution as the Gogs server user.
Information security
fromThe Hacker News
1 day ago

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Authenticated users can trigger remote code execution in Gogs by creating a pull request with a malicious branch name that injects --exec into git rebase.
more#gogs
[ Load more ]