Lucene search
+L

1 matches found

OSV
OSV
added 2021/06/29 6:32 p.m.229 views

GHSA-G6XV-8Q23-W2Q3 SQL Injection in Gogs

Multiple SQL injection vulnerabilities in Gogs aka Go Git Service 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to 1 api/v1/repos/search, which is not properly handled in models/repo.go, or 2 api/v1/users/search, which is...

7.3CVSS8.1AI score0.33391EPSS
SaveExploits5References13
Rows per page
Query Builder