Skip to content
OpenAdvisories
High · 8.2 CVE-2022-0871 EUVD-2022-1432GHSA-gw5h-h6hj-f56gGO-2022-0369

Missing Authorization in gogs/gogs

Published Mar 11, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

Affected products

VendorProductAffectedFixed
gogs gogs/gogs unspecified – < 0.12.5 0.12.5

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Alpine v3.20 gogs 0.12.6-r0 —
Alpine v3.19 gogs 0.12.6-r0 —
Alpine v3.18 gogs 0.12.6-r0 —
Alpine v3.17 gogs 0.12.6-r0 —
Alpine v3.16 gogs 0.12.6-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.15 gogs 0.12.6-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go gogs.io/gogs < 0.12.5 0.12.5 GHSA-gw5h-h6hj-f56g

References