Gogs CVE-2022-1884 RCE via git/config core.sshCommand Injection

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: Remote Command Execution - Vulnerability ID: CVE-2022-1884 - CWE Type: CWE-78: OS Command Injection - Severity: Critical (10) 2. Vulnerability Impact: - Affected Versions: <=0.12.7 - Status: Public - Disclosure Bounty: $200 - Discoverer: @1135 (marked as "HEAVYWEIGHT") 3. Exploitation Steps: 1. Deploy and run Gogs on a Windows server. 2. Upload a file to a Gogs repository. 3. Modify the setting in the file to . 4. Set the parameter in the request body. 5. Click the submit button and intercept the HTTP POST request. 6. Execute the command on the server. 4. Impact Scope: - Affected System: Remote server - Impact Level: Command execution, privilege escalation, leading to sensitive data leakage, identity theft, etc. 5. Exploit Code: - Example exploit code is provided, demonstrating how to trigger the vulnerability by modifying the file and setting the parameter. 6. Remediation: - Fix Status: Fixed - Fix Date: May 20, 2022 - Fixer: Gogs team 7. Discussion: - Content: Includes details on vulnerability discovery, verification, and remediation process, providing a comprehensive view of exploitation and mitigation steps. This information thoroughly describes the nature, scope, exploitation method, and remediation of the vulnerability, which is highly valuable for understanding its severity and implementing preventive measures.

Goal Reached Thanks to every supporter — we hit 100%!

Gogs CVE-2022-1884 RCE via git/config core.sshCommand Injection