Manassehzhou

**Name of the Vulnerable Software and Affected Versions** Gogs versions prior to 0.13.1 **Description** Gogs, an open-source self-hosted Git service, has a flaw that allows a malicious user to write files to arbitrary locations on the server, potentially gaining SSH access. The issue stems from improper path validation in the file update API. Exploitation involves using a crafted request to write a file, such as an SSH authorized key, to a sensitive directory. The API endpoint used for this is `/api/v1/repos/{repo}/contents/{path}`. The vulnerable parameter is the `path` within this endpoint, allowing for path traversal using sequences like `../../../../`. The `PUT` method is used to write the file. **Recommendations** Upgrade to Gogs version 0.13.1 or later to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** Gogs versions prior to 0.13.1 **Description** The issue is related to errors in handling symbolic links in the Gogs self-hosted Git service. A malicious user can commit and edit a crafted symlink file to a repository, allowing them to gain SSH access to the server. **Recommendations** For versions prior to 0.13.1, upgrade to version 0.13.1 or later to protect the server. As a temporary workaround, consider granting access only to trusted users to the Gogs instance on affected versions.

**Name of the Vulnerable Software and Affected Versions** GitLab versions 10.7.0 through 12.9.2 **Description** An issue in GitLab allows a Workhorse bypass, which could lead to job artifact uploads and file disclosure, resulting in the exposure of sensitive information via request smuggling. **Recommendations** For GitLab versions 10.7.0 through 12.9.2, update to a version that contains a fix for this issue to prevent Workhorse bypass and potential file disclosure.

**Name of the Vulnerable Software and Affected Versions** GitLab EE/CE versions 11.1 through 12.9 **Description** The issue is related to parameter tampering on an upload feature, allowing unauthorized users to read content available under specific folders. This can lead to information disclosure, potentially enabling a remote attacker to access confidential data. **Recommendations** For GitLab EE/CE versions 11.1 through 12.9, consider restricting access to the upload feature to minimize the risk of exploitation. As a temporary workaround, limit the ability for unauthorized users to read content from specific folders until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.