Back to article

Rapid7 Cybersecurity Blog

Authenticated RCE via Argument Injection in Gogs (NOT FIXED) (opens in new tab)

Covered by 10 sources including BleepingComputer, infoworld.comDiscussed on r/linux

Covered in 11 articles

BleepingComputer·

Gogs patches critical zero-day enabling remote code execution

BleepingComputer·

New Gogs zero-day flaw lets hackers get remote code execution

infoworld.com·

Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects

No fix yet for critical RCE bug in open-source Git service Gogs

Gogs Zero-Day Exposes Servers to Remote Code Execution

thehackernews.com·

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

csoonline.com·

Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects

IT Security Weekend Catch Up

news.risky.biz·

Risky Bulletin: Dutch police take down giant botnet of 17 million devices

In other languages

Warten auf Sicherheitspatch: Self-hosted-Git-Service Gogs ist verwundbar

Kein Patch für Gogs: Tausende self-hosted Git-Server sind angreifbar