{"id":"CVE-2022-1992","published":"2022-06-08T13:30:14Z","modified":"2024-08-03T00:24:43Z","title":"Path Traversal in gogs/gogs","vendor":"gogs","product":"gogs/gogs","tier":"tail","description":{"text":"Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.","provenance":"source","from":"CVE.org"},"cvss":{"score":10,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.02307,"percentile":0.83291,"provenance":"source"},"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://huntr.dev/bounties/2e8cdc57-a9cf-46ae-9088-87f09e6c90ab","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/gogs/gogs/commit/2ca014250fbf0bba94c914d9e43b1f6d8eca3bb0","tags":["x_refsource_MISC"]}],"priority":{"score":23.7,"factors":[{"name":"EPSS percentile","points":16.66},{"name":"CVSS severity","points":7.0}]},"vendorSlug":"gogs","affectedVersions":[{"vendor":"gogs","product":"gogs/gogs","versions":[">= unspecified, < 0.12.9"]}],"affected":[{"ecosystem":"Go","package":"gogs.io/gogs","vulnerableRanges":["<0.12.9"],"patched":["0.12.9"],"from":["GHSA-994f-7g86-qr56","GO-2022-0570"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-6005","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-gogs-gogs-cwe-22"}}