Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Rapid7 disclosed a critical vulnerability in the open-source self-hosted Git service Gogs, rated 9.4 on CVSS and initially without a CVE identifier, that lets any authenticated user achieve remote code execution by creating a pull request with a malicious...