Gogs has a Path Traversal in file update API

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2024-55947 · CVE overview and exploitation status

EUVD-2024-3608

GHSA-qf5v-rp47-55gg

GO-2024-3356

cve-program · CVE-2024-55947

• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg
• https://github.com/gogs/gogs/issues/7582
• https://github.com/gogs/gogs/pull/7859
• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41

euvd · EUVD-2024-3608

• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg
• https://github.com/gogs/gogs/issues/7582
• https://github.com/gogs/gogs/pull/7859
• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41

nvd · CVE-2024-55947

• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41
• https://github.com/gogs/gogs/issues/7582
• https://github.com/gogs/gogs/pull/7859
• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg

osv · GHSA-qf5v-rp47-55gg

• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg
• https://nvd.nist.gov/vuln/detail/CVE-2024-55947
• https://github.com/gogs/gogs/issues/7582
• https://github.com/gogs/gogs/pull/7859
• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41
• https://github.com/gogs/gogs

osv · GO-2024-3356

• https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg
• https://nvd.nist.gov/vuln/detail/CVE-2024-55947
• https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41
• https://github.com/gogs/gogs/issues/7582
• https://github.com/gogs/gogs/pull/7859

No related changes are available here.