{"action":"Upgrade gogs.io/gogs to 0.12.9 or later.","affected":[{"fixed":"0.12.9","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2022-1992"],"ecosystem":"Go","epss":0.02271,"exploited":false,"fixed_versions":["0.12.9"],"ghsa_id":"GHSA-994f-7g86-qr56","id":"tcs_01M5KF56FNXJANH5WTMH992B2M","modified_at":"2024-08-21T15:27:05.152888Z","published_at":"2022-06-08T20:15:11Z","references":["https://osv.dev/vulnerability/GHSA-994f-7g86-qr56","https://github.com/gogs/gogs/security/advisories/GHSA-994f-7g86-qr56","https://nvd.nist.gov/vuln/detail/CVE-2022-1992","https://github.com/gogs/gogs/commit/2ca014250fbf0bba94c914d9e43b1f6d8eca3bb0","https://github.com/gogs/gogs","https://github.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129","https://huntr.dev/bounties/2e8cdc57-a9cf-46ae-9088-87f09e6c90ab"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-994f-7g86-qr56","url":"https://osv.dev/vulnerability/GHSA-994f-7g86-qr56"}],"summary":"Path Traversal in file editor on Windows in Gogs"}