CVE-2020-9329

Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition...

Race condition

Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition...

CVE-2020-9329

Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition...

CVE-2020-9329

Gogs (Go Git Service) up to version 0.11.91 is affected by a race condition in internal/db/repo.go that allows an attacker to bypass the admin-defined repository-creation policy. The vulnerability enables creation of repositories beyond the configured limits, leveraging a race condition. Exploita...

Jenkins Gogs Cleartext Storage of Credentials Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Jenkins Gogs. Authentication is required to exploit this vulnerability. The specific flaw exists within the Gogs plugin. The issue results from storing credentials in plaintext. An attacker ca...

Missing Permission Checks

github.com/gogs/gogs is vulnerable to missing permission checks. The function RegisterRoutes in routes/api/v1/api.g does not invoke the reqAdmin method to perform permission checks for deploy keys, collaborators, and hooks...

Gogs < 0.11.86 Directory Traversal Vulnerability

Gogs is prone to a directory traversal vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Gogs < 0.11.91 Improper Access Vulnerability

Gogs is prone to an improper access vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-14544

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks...

CVE-2019-14544

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks...

Design/Logic Flaw

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks...

CVE-2019-14544

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks...

CVE-2019-14544

CVE-2019-14544 affects Gogs 0.11.86 where routes/api/v1/api.go fails to perform permission checks for deploy keys, collaborators, and hooks. The root cause is improper access control in the vulnerable routes, enabling unauthorized access to these endpoints. NVD lists a high/critical impact with n...

PT-2019-13743 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.86 Description: The issue concerns insecure permissions in Gogs, specifically affecting routes related to deploy keys, collaborators, and hooks. This is due to a lack of permission checks in the routes/api/v1/api.go file...

Unspecified Vulnerability in CloudBees Jenkins Gogs Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Gogs Plugin is used in one of the Gogs self-hosted Gi...

CVE-2019-10348

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10348

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

Design/Logic Flaw

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10348

Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10348

CVE-2019-10348 - Jenkins Gogs Plugin: The vulnerability arises from storing credentials in plaintext in job config.xml on the Jenkins master, enabling disclosure to users with Extended Read or anyone with master filesystem access. The NVD entry notes a CVSS v3.1 base score of 8.8 (HIGH). Public a...