IT

Rebase to RCE: Gogs' Unpatched Gift to the Script Kiddie Ecosystem

A CVSS 9.4 masterclass in why letting users blindly inject raw shell arguments into backend Git operations is a sub-optimal architectural choice.

By Julian March