CVE-2022-0415CWE-20

Remote Command Execution in uploading repository file in gogs/gogs

Critical · published March 21, 2022

Patch now

High probability of exploitation

CVSS calls it critical at 9.9. It sits in the 99.3th percentile for exploit probability.

CVSS v3.0
9.9
EPSS
66%
Percentile
99.3
In the wild
Unconfirmed
What it is

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

The record
Technical detail
CVSS v3.0
9.9 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.65935 · 99.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-03-21T10:45Z
EPSS history
Timeline
  • 21 MAR 10:45Z
    Remote Command Execution in uploading repository file in gogs/gogs
    cvelistv5