goshs.de/goshs vulnerabilities (Go)
9 vulnerabilities.
-
goshs.de/goshsGo goshs has ACL Bypass & Path Traversal 5.3 Medium -
goshs.de/goshsGo goshs has a Path Traversal issue 6.5 Medium -
goshs.de/goshsGo goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite 9.1 Critical -
goshs.de/goshsGo goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189) 7.5 High -
goshs.de/goshsGo goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884) 9.1 Critical -
goshs.de/goshsGo goshs: Share-link ?token=… redemption races past download limit 5.9 Medium -
goshs.de/goshsGo goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags 8.1 High -
goshs.de/goshsGo goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request 7.4 High -
goshs.de/goshsGo goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS 6.5 Medium