GHSA-PX5R-FQJ6-R2F8 Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

CVE-2018-16409

In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...

Server side request forgery (ssrf)

In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...

CVE-2018-16409

CVE-2018-16409 affects Gogs 0.11.53. The vulnerability allows an attacker to use the migrate function to send arbitrary HTTP GET requests, causing SSRF. Reported impact per NVD includes a CVSS3 base score of 8.6 (HIGH) with network attack vector and no user interaction required; SIEM/mitigation g...