{"id":"EUVD-2024-3608","enisaUuid":"ca333659-096f-3cab-a8a0-4817d671e93b","description":"Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.","datePublished":"Dec 23, 2024, 3:26:47 PM","dateUpdated":"Dec 24, 2024, 3:59:02 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg\nhttps://github.com/gogs/gogs/issues/7582\nhttps://github.com/gogs/gogs/pull/7859\nhttps://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41\n","aliases":"CVE-2024-55947\nGHSA-qf5v-rp47-55gg\n","assigner":"GitHub_M","epss":77.69,"enisaIdProduct":[{"id":"97bf17bf-9316-3e28-ba86-c3a2e60958d8","product":{"name":"gogs","vendor":{"name":"gogs"}},"product_version":"\u003c 0.13.1"}],"enisaIdVendor":[{"id":"a6b62428-91d5-3569-b572-25f7e18ff070","vendor":{"name":"gogs"}}],"enisaIdVulnerability":[{"id":"0f3b97c9-72b4-38cd-ae48-ee8cf7471eea","vulnerability":{"id":"CVE-2024-55947","description":"Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.","datePublished":"Dec 23, 2024, 3:26:47 PM","dateUpdated":"Dec 24, 2024, 3:59:02 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg\nhttps://github.com/gogs/gogs/issues/7582\nhttps://github.com/gogs/gogs/pull/7859\nhttps://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41\n","enisa_id":"EUVD-2024-3608\n","assigner":"GitHub_M","epss":77.69,"dataProcessed":"Nov 8, 2026, 7:19:11 AM","vulnerabilityProduct":[{"id":"0364b109-b191-4a61-9a9b-5e768457658c","product":{"name":"gogs","vendor":{"name":"gogs"}},"product_version":"\u003c 0.13.1"},{"id":"9f16e21e-6da8-36f1-adec-775922aceae4","product":{"name":"gogs","vendor":{"name":"gogs"}},"product_version":"\u003c 0.13.1"}],"vulnerabilityVendor":[{"id":"5f836c35-b7a0-3b7d-9645-29254efd5f6f","vendor":{"name":"gogs"}}]}},{"id":"e3f988eb-ee9a-3a3d-8d86-2b31397c9b6c","vulnerability":{"id":"GHSA-qf5v-rp47-55gg","description":"Path Traversal in file update API in gogs","datePublished":"Dec 23, 2024, 5:53:16 PM","dateUpdated":"Apr 10, 2025, 10:56:52 PM","baseScore":0.0,"references":"https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-55947\nhttps://github.com/gogs/gogs/issues/7582\nhttps://github.com/gogs/gogs/pull/7859\nhttps://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41\nhttps://github.com/gogs/gogs\n","enisa_id":"EUVD-2024-3608\n","aliases":"CVE-2024-55947\nGHSA-qf5v-rp47-55gg\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:10:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"1719cf60-cbba-38b7-af38-f7f0f0ec9a63","advisory":{"id":"openSUSE-SU-2025:14624-1","description":"govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media","datePublished":"Jan 9, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:24:25 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14624-1.json\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UV63VQGB6Y3V7AIZHIKF3PMFVIHM32MI/\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UV63VQGB6Y3V7AIZHIKF3PMFVIHM32MI/\nhttps://www.suse.com/security/cve/CVE-2024-25133/\nhttps://www.suse.com/security/cve/CVE-2024-28892/\nhttps://www.suse.com/security/cve/CVE-2024-45387/\nhttps://www.suse.com/security/cve/CVE-2024-54148/\nhttps://www.suse.com/security/cve/CVE-2024-55196/\nhttps://www.suse.com/security/cve/CVE-2024-55947/\nhttps://www.suse.com/security/cve/CVE-2024-56362/\nhttps://www.suse.com/security/cve/CVE-2024-56513/\nhttps://www.suse.com/security/cve/CVE-2024-56514/\nhttps://www.suse.com/security/cve/CVE-2025-21609/\nhttps://www.suse.com/security/cve/CVE-2025-21613/\nhttps://www.suse.com/security/cve/CVE-2025-21614/\nhttps://www.suse.com/security/cve/CVE-2025-22130/\n","aliases":"CVE-2024-25133\nCVE-2024-28892\nCVE-2024-45387\nCVE-2024-54148\nCVE-2024-55196\nCVE-2024-55947\nCVE-2024-56362\nCVE-2024-56513\nCVE-2024-56514\nCVE-2025-21609\nCVE-2025-21613\nCVE-2025-21614\nCVE-2025-22130\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0fb49cfa-0803-3bb9-9492-3a3cf6ef4eb4","product":{"name":"govulncheck-vulndb-0:0.0.20250108T191942-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"42983a89-ba8e-3c47-80fb-4357608c8a27","product":{"name":"govulncheck-vulndb-0:0.0.20250108T191942-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"864f2517-3902-3e7b-8d8a-7638ded8b444","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"9bea8dcb-f3c7-3745-9a4a-9e2d2a6cd29e","product":{"name":"govulncheck-vulndb-0:0.0.20250108T191942-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cfb2a019-fe5a-351c-a04c-7f65a7f2e2bc","product":{"name":"govulncheck-vulndb-0:0.0.20250108T191942-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"2650506f-f3e9-3522-a6bf-070b0e533ff3","advisory":{"id":"SUSE-SU-2025:0060-1","description":"Security update for govulncheck-vulndb","summary":"Security update for govulncheck-vulndb","datePublished":"Jan 10, 2025, 11:33:29 AM","dateUpdated":"Jan 10, 2025, 11:33:29 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0060-1.json\nhttps://www.suse.com/support/update/announcement/2025/suse-su-20250060-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2025-January/020087.html\nhttps://www.suse.com/security/cve/CVE-2024-12678/\nhttps://www.suse.com/security/cve/CVE-2024-25131/\nhttps://www.suse.com/security/cve/CVE-2024-25133/\nhttps://www.suse.com/security/cve/CVE-2024-28892/\nhttps://www.suse.com/security/cve/CVE-2024-43803/\nhttps://www.suse.com/security/cve/CVE-2024-45338/\nhttps://www.suse.com/security/cve/CVE-2024-45387/\nhttps://www.suse.com/security/cve/CVE-2024-54148/\nhttps://www.suse.com/security/cve/CVE-2024-55196/\nhttps://www.suse.com/security/cve/CVE-2024-55947/\nhttps://www.suse.com/security/cve/CVE-2024-56362/\nhttps://www.suse.com/security/cve/CVE-2024-56513/\nhttps://www.suse.com/security/cve/CVE-2024-56514/\nhttps://www.suse.com/security/cve/CVE-2024-9779/\nhttps://www.suse.com/security/cve/CVE-2025-21609/\nhttps://www.suse.com/security/cve/CVE-2025-21613/\nhttps://www.suse.com/security/cve/CVE-2025-21614/\nhttps://www.suse.com/security/cve/CVE-2025-22130/\n","aliases":"CVE-2024-12678\nCVE-2024-25131\nCVE-2024-25133\nCVE-2024-28892\nCVE-2024-43803\nCVE-2024-45338\nCVE-2024-45387\nCVE-2024-54148\nCVE-2024-55196\nCVE-2024-55947\nCVE-2024-56362\nCVE-2024-56513\nCVE-2024-56514\nCVE-2024-9779\nCVE-2025-21609\nCVE-2025-21613\nCVE-2025-21614\nCVE-2025-22130\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"2ee4de1a-8c43-357f-ba7b-320ede38a97d","product":{"name":"openSUSE Leap 15.6","vendor":{"name":"SUSE"}}},{"id":"677b59d5-f0b1-3dde-9d84-453c2a3a333e","product":{"name":"govulncheck-vulndb-0.0.20250108T191942-150000.1.26.1.noarch","vendor":{"name":"SUSE"}}},{"id":"8e9c332e-86bf-3044-8267-451831abdb7d","product":{"name":"SUSE Linux Enterprise Module for Package Hub 15 SP6","vendor":{"name":"SUSE"}}}]}}]}