1170 matches found
CVE-2022-2024
Vulnerability summary (CVE-2022-2024) : Gogs (gogs/gogs) versions prior to 0.12.11 are affected by an OS Command Injection in the repository file upload path. The issue arises when a crafted config file is placed into a repository’s .git directory during uploads, enabling remote command execution...
Cross-site Scripting (XSS)
gogs is vulnerable to cross-site scripting XSS. A remote attacker is able to execute malicious JavaScript via providing an XSS payload through the full name parameter, which allows the attacker to gain admin privileges and takeover the account...
Gogs vulnerable to Cross-site Scripting
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
GHSA-MCJJ-2FVQ-MC3R Gogs vulnerable to Cross-site Scripting
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
EUVD-2022-7125
Gogs vulnerable to Cross-site Scripting...
CVE-2022-32174
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
Cross site scripting
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
CVE-2022-32174 Gogs - XSS
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
CVE-2022-32174 Gogs - XSS
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
CVE-2022-32174
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
CVE-2022-32174 Gogs - XSS
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
CVE-2022-32174
Gogs CVE-2022-32174 affects versions v0.6.5–v0.12.10 with a Stored XSS that can lead to account takeover. The vulnerability arises from improper validation in the select assignee component, enabling a remote authenticated attacker to inject script that runs in a victim’s browser within the hostin...
PT-2022-21137 · Gogs · Gogs
Name of the Vulnerable Software and Affected Versions: Gogs versions v0.6.5 through v0.12.10 Description: The issue is related to Stored Cross-Site Scripting XSS that can lead to an account takeover. Recommendations: For versions v0.6.5 through v0.12.10, update to a version that is not affected b...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Gogs, versions v0.6.5 through v0.12.10 is vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...
Gogs 跨站脚本漏洞
Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A cross-site scripting vulnerability exists in Gogs versions v0.6.5...
Gogs < 0.12.9 Multiple Vulnerabilities
Gogs is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...
CVE-2022-31038
Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 DisplayName does not filter characters input from users, which leads to an XSS vulnerability when directly displayed in the issue list. This issue has been resolved in commit 155cae1d which sanitizes DisplayName...
CVE-2022-1992
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
