Product · Gogs

gogs/gogs

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.1

CVE-2022-1993 EPSS 37%

Path Traversal in gogs/gogs

Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

Gogs gogs/gogs gogs.io/gogs Go

Jun 8, 2022
High 8.3

CVE-2022-1285

Server-Side Request Forgery (SSRF) in gogs/gogs

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

Jun 1, 2022
High 7.3

CVE-2022-1464

Stored xss bug in gogs/gogs

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

May 5, 2022
High 8.2

CVE-2022-0871

Missing Authorization in gogs/gogs

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

Gogs gogs/gogs gogs.io/gogs gogs Alpine Go

Mar 11, 2022