Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 0.7%
exploitation probability
0.7%top 52% of all CVEs
observed exploitation
nono source reports it
In short
Gogs allows authenticated users with wiki write access to delete arbitrary files on the server by manipulating file paths in wiki page updates. This can lead to critical system damage or data loss.
Technical detail
A path traversal vulnerability in the updateWikiPage function allows authenticated attackers with repository wiki write permissions to delete arbitrary files by exploiting the old_title parameter. The vulnerability requires valid repository access but enables unrestricted file deletion through directory traversal techniques, affecting system integrity and availability.
Summary generated and translated by AI from the official description.
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitrary files on the server by manipulating the old_title parameter in the wiki editing form. This issue has been patched in versions 0.13.4 and 0.14.0+dev.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
gogs · gogs