Server-Side Request Forgery (SSRF)

🗓️ 14 May 2022 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

SSRF vulnerability in Gitea webhooks allows remote access to intranet service

Reporter	Title	Published	Views	Family All 9
OSV	GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea	20 Aug 202420:32	–	osv
OSV	Gogs and Gitea SSRF Vulnerability	14 May 202202:20	–	osv
OSV	CVE-2018-15192	8 Aug 201802:29	–	osv
Veracode	Server Side Request Forgery (SSRF)	18 Oct 202410:35	–	veracode
Github Security Blog	Gogs and Gitea SSRF Vulnerability	14 May 202202:20	–	github
Prion	Server side request forgery (ssrf)	8 Aug 201802:29	–	prion
Cvelist	CVE-2018-15192	8 Aug 201802:00	–	cvelist
NVD	CVE-2018-15192	8 Aug 201802:29	–	nvd
CVE	CVE-2018-15192	8 Aug 201802:29	–	cve

Vulners

Node

go giteaRange≤1.5.0-rc2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-15192
github	www.github.com/go-gitea/gitea/issues/4624
github	www.github.com/gogs/gogs/issues/5366
github	www.github.com/advisories/GHSA-fg3x-rwq9-74cw

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2022 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS25

CVSS38.6

EPSS0.00313