goshs.de/goshs/v2 vulnerabilities (Go)
9 vulnerabilities.
goshs.de/goshs/v2Gogoshs has ACL Bypass & Path Traversal5.3 Mediumgoshs.de/goshs/v2Gogoshs has a Path Traversal issue6.5 Mediumgoshs.de/goshs/v2Gogoshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite9.1 Criticalgoshs.de/goshs/v2Gogoshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189)7.5 Highgoshs.de/goshs/v2Gogoshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)9.1 Criticalgoshs.de/goshs/v2Gogoshs: Share-link ?token=… redemption races past download limit5.9 Mediumgoshs.de/goshs/v2Gogoshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags8.1 Highgoshs.de/goshs/v2Gogoshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request7.4 Highgoshs.de/goshs/v2Gogoshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS6.5 Medium