Description
Gogs存在远程命令执行漏洞，该漏洞是由于在将文件上传到存储库时对tree_path参数验证不正确造成的。
Gogs CVE-2022-0415 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2022-0415/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0415.yaml
https://pentest-tools.com/vulnerabilities-exploits/gogs-0126-remote-command-execution_3192
https://pentesterlab.com/exercises/cve-2022-0415
https://www.miggo.io/vulnerability-database/cve/CVE-2022-0415
https://cn-sec.com/archives/994701.html
https://tttang.com/archive/1607/
https://mnihyc.com/blog/archives/1814
https://elvis.hk/aggregator/sources/146