Skip to contentGogs vulnerabilities
Newest
- gogsDuplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930CVE-2024-39930Public exploitFix available9.9 Critical
- gogs, gogs gogs/gogs +1 moreOS Command Injection in gogs/gogsCVE-2022-2024Fix availableEPSS 97.8%9.8 Critical
- gogsGogs - XSSCVE-2022-32174Fix availableEPSS 58.2%9.0 Critical
- gogs, gogs gogs/gogs +1 moreOS Command Injection in gogs/gogsCVE-2022-1986Fix available10.0 Critical
- gogsXSS vulnerability in repository issue list in GogsCVE-2022-31038Fix available5.4 Medium
- gogs, gogs gogs/gogs +1 morePath Traversal in gogs/gogsCVE-2022-1993Fix availableEPSS 36.7%8.1 High
- gogs, gogs gogs/gogs +1 morePath Traversal in gogs/gogsCVE-2022-1992Fix available10.0 Critical
- gogs, gogs gogs/gogs +1 moreRemote Command Execution in gogs/gogsCVE-2022-1884Fix available10.0 Critical
- gogs, gogs gogs/gogs +1 moreServer-Side Request Forgery (SSRF) in gogs/gogsCVE-2022-1285Fix available8.3 High
- gogsOS Command Injection in gogsCVE-2021-32546Fix available8.8 High
- gogs, gogs gogs/gogs +1 moreStored xss bug in gogs/gogsCVE-2022-1464Fix available7.3 High
- gogs, gogs gogs/gogs +1 moreRemote Command Execution in uploading repository file in gogs/gogsCVE-2022-0415Fix availableEPSS 65.9%9.9 Critical
- gogs, gogs gogs/gogs +1 moreServer-Side Request Forgery (SSRF) in gogs/gogsCVE-2022-0870Fix available5.0 Medium
- gogs, gogs gogs/gogs +1 moreMissing Authorization in gogs/gogsCVE-2022-0871Fix available8.2 High
- gogsThe git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution. There can be a privilege escalation if access to this hook feature is granted to a user who does not h…CVE-2020-15867Public exploitEPSS 87.4%7.2 High
- gogsInsecure Permissions in GogsCVE-2020-14958Fix available6.5 Medium
- gogsGogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to...CVE-2020-93295.9 Medium
- gogsInsecure Permissions in GogsCVE-2019-14544Fix available9.8 Critical
- gogsGogs Directory TraversalCVE-2018-20303Fix available7.5 High
- gogsGogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as...CVE-2018-18925Public exploitEPSS 31.1%9.8 Critical
- gogsGogs XSS VulnerabilityCVE-2018-17031Fix available6.1 Medium
- gogsIn Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.CVE-2018-164098.6 High
- gogsA CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to...CVE-2018-151938.8 High
- gitea, gogs +1 moreGogs and Gitea SSRF VulnerabilityCVE-2018-15192Fix available8.6 High
- gogsOpen RedirectCVE-2018-15178Fix available6.1 Medium