Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0870

Gogs (gogs/gogs) prior to version 0.12.5 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the repository migration logic. The issue enables an attacker to trigger SSRF via the affected migration pathway, with reachable impact limited to information exposure or unauthorized int...

CVE-2022-0871: Missing Authorization

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0870: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0871

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...