Gogs has arbitrary file read/write via path traversal in Git hook editing

Gogs allows attackers to read or write arbitrary files on the server by exploiting path traversal in the Git hook editing feature. This can lead to unauthorized data access or system compromise.

A path traversal vulnerability (CWE-22) in Gogs Git hook editor allows authenticated or unauthenticated attackers to escape the intended directory context using directory traversal sequences, enabling arbitrary file read/write operations with the privileges of the Gogs process.