CVE-2018-20303

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under…

published December 20, 2018

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03291 · 88.4th percentile
Published
2018-12-20T00:00Z
EPSS history
Timeline
  • 20 DEC 00:00Z
    In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under…
    cvelistv5