Skip to content
The Nexus
DossierENTITY

GHSA-qf6p-p7ww-cwr9

Coverage of GHSA-qf6p-p7ww-cwr9 in the Nexus archive.

Earliest in view: May 29 · 18:26 UTCMost recent: May 29 · 18:26 UTC
Co-mentioned in this coverage
Gogsorganization1Rapid7organization1Jonah Burgessperson1Metasploittopic1DigitalOceanorganization1
Recent coverage
  • SECURITYMay 29 · 18:26 UTCTHE REGISTER
    No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

    A critical remote code execution (RCE) vulnerability in Gogs, a self-hosted Git service, remains unpatched despite being reported in March. The flaw allows authenticated users to exploit default installations, steal credentials, and execute arbitrary code. Rapid7 researcher Jonah Burgess disclosed the issue (GHSA-qf6p-p7ww-cwr9) and submitted a proposed fix, but Gogs maintainers have not released a patch, prompting a Metasploit module to be published.

GHSA-qf6p-p7ww-cwr9 · Dossier · The Nexus