cve/2022/CVE-2022-0415.md

CVE-2022-0415

Description

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

POC

Reference

• https://huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902
• https://huntr.dev/bounties/b4928cfe-4110-462f-a180-6d5673797902

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/bfengj/CTF
• https://github.com/cokeBeer/go-cves
• https://github.com/saveworks/saveworks
• https://github.com/wuhan005/wuhan005