PT-2020-14674 · Gogs · Gogs

Published 2020-10-16 · Updated 2022-04-26 · CVE-2020-15867

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gogs versions 0.5.5 through 0.12.2

Description The git hook feature in Gogs allows for authenticated remote code execution. This can lead to a privilege escalation if access to this hook feature is granted to a user without administrative privileges. The issue is notable because the documentation mentions it, but the UI does not warn the user about the potential unsafe actions.

Recommendations For Gogs versions 0.5.5 through 0.12.2, consider restricting access to the git hook feature to only administrative users to minimize the risk of exploitation. As a temporary workaround, consider disabling the git hook feature until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-15867

Affected Products

Gogs

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gogs_git_hooks_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/162123/Gogs-Git-Hooks-Remote-Code-Execution.html · Exploit
• 🔥 https://fzi.de/en/news/news/detail-en/artikel/fsa-2020-3-schwachstelle-in-gitea-1125-und-gogs-0122-ermoeglicht-ausfuehrung-von-code-nach-authent · Exploit
• https://osv.dev/vulnerability/CVE-2020-15867 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15867 · Security Note
• https://t.me/cibsecurity/15327 · Telegram Post