gogs - 命令执行漏洞复现

2022-06-30

正文internal/db/repo_editor.go#L490-L495func isRepositoryGitPath(path string) bool { return strings.HasSuffix(path, ".git") || strings.Contains(path, ".git"+string(os.PathSeparator)) } func (repo *Repository) Upload…