Gogs has a Path Traversal in file update API

The flaw is a path traversal in the file update API of Gogs, an open source self-hosted Git service, which lets the file-writing logic escape its intended directory. An attacker with low-privileged, authenticated access over the network, requiring no user interaction and no non-default configuration, can write a file to an arbitrary location on the server and use it to gain SSH access to the host.