CVE-2018-18925 PoC — Gogs 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18925.yaml

Associated Vulnerability

Title:Gogs 安全漏洞 (CVE-2018-18925)
Description:Gogs（又名Go Git Service）是Gogs团队开发的一个基于Go语言的自助Git托管服务，它支持创建、迁移公开/私有仓库，添加、删除仓库协作者等。 Gogs 0.11.66版本中存在安全漏洞，该漏洞源于程序没有正确验证会话ID。远程攻击者可利用该漏洞执行代码。

Description

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron.

File Snapshot


 id: CVE-2018-18925

info:
  name: Gogs (Go Git Service) 0.11.66 - Remote Code Execution
  author: pr

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!