CVE-2024-39931 : Gogs through 0.13.0 allows deletion of internal files.

Gogs through 0.13.0 allows deletion of internal files.

Published 2024-07-04 16:15:03

Updated 2025-04-10 13:43:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2024-39931

Gogs » Gogs
Versions up to, including, (<=) 0.13.0
cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

1.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.9	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	3.1	6.0	MITRE	2024-07-04
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
9.9	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	3.1	6.0	NIST	2025-04-10
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE-552 Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Jump to