🍵 CVE-2022-30781

Gitea repository migration remote command execution exploit.

How to use

Run an HTTP filesystem server with the files in this repository.
Edit the command to be exeucted in api/v1/repos/e99/exp/pulls/1/index.html L96.
Migrate remote repository with URL http://<your_host>/e99/exp on the Gitea instance.
Pwnned!

@wuhan005 @Li4n0 from Vidar-Team

This repository is only for security researches/teaching purposes, use at your own risk!

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
api/v1		api/v1
README.md		README.md