Read the docs

Gogits

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Gogits records in CISA KEV

No Gogits vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gogs 3 records MEDIUM

Records

3 records in Gogs · all components

TI-2014-07133 CVE-2014-8682 · GHSA-g6xv-8q23-w2q3

Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x…

Priority MEDIUM 57

Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to (1) api/v1/repos/search, wh…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.32616 Published 2014-11-21 Fixed in 0.5.8 CWE-89
TI-2014-07132 CVE-2014-8681 · GHSA-mr6h-chqp-p9g2

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go…

Priority MEDIUM 40

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04437 Published 2014-11-21 Fixed in 0.5.8 CWE-89
TI-2014-07134 CVE-2014-8683 · GHSA-9hx4-qm7h-x84j

Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service)…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.8 allows remote attackers to inject arbitrary web script or HTML via the text parameter to api/v1/…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01909 Published 2014-11-21 Fixed in 0.5.8 CWE-79
Open these records in search →