HD Moore on Nostr: PSA: If you use GOGS.io (the predecessor to Gitea and friends), please make sure ...
PSA: If you use GOGS.io (the predecessor to Gitea and friends), please make sure self-registration is disabled. I reported a trivial RCE a couple months ago, received no reply, and it's starting to look intentional.
Published at
2024-06-01 02:04:47Event JSON
{
"id": "89a3448b9599413083b1dfe5a9528746026b4cbfd0dc25ead9f6b384d9872e26",
"pubkey": "38710f1c39a6351a46a073049a61e8eaf39e14168a2a81a2549950699dcbb9d9",
"created_at": 1717207487,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@hdm/112538909923966953",
"web"
],
[
"proxy",
"https://infosec.exchange/users/hdm/statuses/112538909923966953",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/hdm/statuses/112538909923966953",
"pink.momostr"
]
],
"content": "PSA: If you use GOGS.io (the predecessor to Gitea and friends), please make sure self-registration is disabled. I reported a trivial RCE a couple months ago, received no reply, and it's starting to look intentional.",
"sig": "c5fdacceaf6859ee31d5e75e2d33e78bf23dba7f2d5a69a6bd408bf9ce03e296dc331816a06c149dc34769d74d847a09ae76e7548573a250d54f182c801da351"
}
