1170 matches found
CVE-2018-17031
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
CVE-2018-17031 affects Gogs 0.11.53 where a crafted .eml file can trigger MIME-type sniffing, causing XSS. The root cause is the absence of the X-Content-Type-Options: nosniff header, enabling the browser to sniff MIME types and execute injected scripts. This is supported by multiple connected en...
PT-2018-13849 · Gogs · Gogs
Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.53 Description: The issue allows an attacker to trigger MIME type sniffing using a crafted .eml file, leading to XSS. This is demonstrated by Internet Explorer and is caused by the lack of an "X-Content-Type-Options: nosniff...
CVE-2018-16409
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
CVE-2018-16409
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
Server side request forgery (ssrf)
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
CVE-2018-16409
CVE-2018-16409 affects Gogs 0.11.53. The vulnerability allows an attacker to use the migrate function to send arbitrary HTTP GET requests, causing SSRF. Reported impact per NVD includes a CVSS3 base score of 8.6 (HIGH) with network attack vector and no user interaction required; SIEM/mitigation g...
CVE-2018-16409
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
FreeBSD : gogs -- open redirect vulnerability (e53a908d-a645-11e8-8acd-10c37b4ac2ea)
bluecatli Tencent's Xuanwu Lab reports : The function isValidRedirect in gogs/routes/user/auth.go is used in login action to validate if url is on the same site. If the Location header startswith /, it will be transformed to // by browsers. C Tenable Network Security, Inc. The descriptive text an...
Open Redirection
github.com/gogs/gogs is vulnerable to open redirection attacks. The isValidRedirect function in routes/user/auth.go does not validate the initial /\ substring in the URL, which allows remote attackers to redirect users to malicious websites and perform phishing attacks via the redirectto paramete...
CVE-2018-15192
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services...
Server side request forgery (ssrf)
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services...
CVE-2018-15193
A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link...
CVE-2018-15193
A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link...
CVE-2018-15192
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services...
Cross site request forgery (csrf)
A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link...
CVE-2018-15192
CVE-2018-15192 is an SSRF vulnerability in the webhook handling of Gitea (up to 1.5.0-rc2) and Gogs (up to 0.11.53) . The issue arises when webhook URLs are processed, allowing an attacker to trigger requests from the vulnerable server to internal (intranet) services. Multiple sources describe th...
CVE-2018-15193
CVE-2018-15193: A CSRF vulnerability in the Gogs admin panel (through version 0.11.53) allows remote attackers to execute admin operations via a crafted issue/link. The connected documents do not provide exploit specifics or a remediation fix.