GHSA-4J89-2C4F-44C6 Gogs has DoS in rendering issue index pattern

Summary Special template of issue index pattern may cause panic. Details in internal/markup/markup.go go link = fmt.Sprintf%s, com.Expandmetas"format", metas, m Issue index pattern is rendered to link with com.Expand. However, com.Expand is not safe. go i = strings.Indextemplate, "" if s, ok :=...

CVE-2023-29024 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a...

CVE-2023-29023

CVE-2023-29023 affects Rockwell Automation’s ArmorStart ST. The issue is a cross-site scripting vulnerability (improper input handling) that could allow a malicious user to view/modify sensitive data or render the web page unavailable, with exploitation requiring user interaction (e.g., phishing)...