Package · Alpine

gogs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

Critical 9.0

CVE-2022-32174 EPSS 58%

Gogs - XSS

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

Gogs Gogs gogs.io/gogs gogs Alpine Go

Oct 11, 2022
High 8.3

CVE-2022-1285

Server-Side Request Forgery (SSRF) in gogs/gogs

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

Jun 1, 2022
High 7.3

CVE-2022-1464

Stored xss bug in gogs/gogs

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

May 5, 2022
Medium 5.0

CVE-2022-0870

Server-Side Request Forgery (SSRF) in gogs/gogs

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

Mar 11, 2022
High 8.2

CVE-2022-0871

Missing Authorization in gogs/gogs

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

Mar 11, 2022