# Security vulnerability or attempted hack?

**URL:** <https://forum.gitea.com/t/security-vulnerability-or-attempted-hack/5601>\
**Category:** Install/Maintain/Configure\
**Created:** [July 30, 2022, 12:03am UTC](https://forum.gitea.com/t/security-vulnerability-or-attempted-hack/5601 "2022-07-30T00:03:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jkugler](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.gitea.com/jkugler/32/5058_2.png) [@jkugler](https://forum.gitea.com/u/jkugler)\
**Post date:** [July 30, 2022, 12:03am UTC](https://forum.gitea.com/t/security-vulnerability-or-attempted-hack/5601/1 "2022-07-30T00:03:13Z")

</div>

I saw this in my logs today.

```auto
Jul 29 13:12:27 projects gitea: #033[36m2022/07/29 13:12:27 #033[0mStarted #033[34mGET#033[0m #033[1m/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession#033[0m for #033[1m127.0.0.1:40472#033[0m
Jul 29 13:12:27 projects gitea: #033[36m2022/07/29 13:12:27 #033[0mCompleted #033[34mGET#033[0m #033[1m/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession#033[0m #033[33m302#033[0m #033[33mFound#033[0m in #033[32m1.272828ms#033[0m
Jul 29 13:12:27 projects gitea: #033[36m2022/07/29 13:12:27 #033[0mStarted #033[34mGET#033[0m #033[1m/user/login#033[0m for #033[1m127.0.0.1:40474#033[0m
Jul 29 13:12:27 projects gitea: #033[36m2022/07/29 13:12:27 #033[0mCompleted #033[34mGET#033[0m #033[1m/user/login#033[0m #033[32m200#033[0m #033[32mOK#033[0m in #033[32m6.662754ms#033[0m

```

I assume this is an attempted hack and nothing to worry about?

Also: could we got have ASCII color escape sequences in syslog output? 🙂

---

<div class="post-metadata">

**Author:** ![lunny](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.gitea.com/lunny/32/4701_2.png) [@lunny](https://forum.gitea.com/u/lunny)\
**Post date:** [August 5, 2022, 8:34am UTC](https://forum.gitea.com/t/security-vulnerability-or-attempted-hack/5601/2 "2022-08-05T08:34:09Z")

</div>

Yes, the attempt failed. You can change options in `[log]`.