Gogs through 0.13.0 allows argument injection during the tagging of a new release.
References
Configurations
No configuration.
History
12 Jul 2024, 16:11
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-88 |
05 Jul 2024, 12:55
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
04 Jul 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-04 16:15
Updated : 2024-07-12 16:11
NVD link : CVE-2024-39933
Mitre link : CVE-2024-39933
CVE.ORG link : CVE-2024-39933
JSON object : View
Products Affected
No product.
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')