CVE-2024-39933

Summary

CVE-2024-39933 is a newly disclosed vulnerability affecting Gogs versions up to 0.13.0. This issue permits argument injection during the tagging process of a new release, enabling attackers to execute arbitrary commands on the Gogs server. An attacker could exploit this vulnerability by crafting a malicious tag name that includes injected code, potentially leading to server compromise or unauthorized access to sensitive information. It is recommended that users upgrade to the latest version of Gogs to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.