High · 8.6 CVE-2018-15192 EUVD-2022-3768GHSA-fg3x-rwq9-74cwGO-2023-1971

Gogs and Gitea SSRF Vulnerability

Published Aug 8, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.

Ecosystem	Package	Affected	Fixed	Record
Go	code.gitea.io/gitea	< 1.16.0-rc1	1.16.0-rc1	GHSA-fg3x-rwq9-74cw
Go	gogs.io/gogs	< 0.12.0	0.12.0	GHSA-fg3x-rwq9-74cw