Server Side Request Forgery (SSRF)

Gitea and Gogs are vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to insufficient input sanitization or filtering of webhook URLs, which allows attackers to send malicious requests that exploit the SSRF flaw and gain access to internal services...

GO-2022-0831 SQL Injection in Gogs in gogs.io/gogs

SQL Injection in Gogs in gogs.io/gogs...

GO-2022-0797 Insecure Permissions in Gogs in gogs.io/gogs

Insecure Permissions in Gogs in gogs.io/gogs...

GO-2022-0788 Insecure Permissions in Gogs in gogs.io/gogs

Insecure Permissions in Gogs in gogs.io/gogs...

GO-2022-0749 OS Command Injection in gogs in gogs.io/gogs

OS Command Injection in gogs in gogs.io/gogs...

GO-2022-0642 Cross-site Scripting in Gogs in gogs.io/gogs

Cross-site Scripting in Gogs in gogs.io/gogs...

GO-2022-0583 Server-Side Request Forgery in gogs webhook in gogs.io/gogs

Server-Side Request Forgery in gogs webhook in gogs.io/gogs...

GO-2022-0597 Cross-site Scripting in Gogs in gogs.io/gogs

Cross-site Scripting in Gogs in gogs.io/gogs...

GO-2022-0570 Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

Path Traversal in file editor on Windows in Gogs in gogs.io/gogs...

GO-2022-0554 Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs...

GO-2022-0556 OS Command Injection in file editor in Gogs in gogs.io/gogs

OS Command Injection in file editor in Gogs in gogs.io/gogs...

GO-2022-0566 SSRF in repository migration in gogs.io/gogs

SSRF in repository migration in gogs.io/gogs...

GO-2022-0483 Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs...

GO-2022-0471 OS Command Injection in gogs in gogs.io/gogs

OS Command Injection in gogs in gogs.io/gogs...

GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...

GO-2023-1972 Gogs XSS Vulnerability in gogs.io/gogs

Gogs XSS Vulnerability in gogs.io/gogs...

GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea...

GO-2023-1596 Gogs OS Command Injection vulnerability in gogs.io/gogs

Gogs OS Command Injection vulnerability in gogs.io/gogs...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing a hacker to execute arbitrary commands.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of exploiting or modifying arguments, allowing a perpetrator to disclose protected information.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...