Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2018-17031

Disclosure Date: September 14, 2018 (last updated November 27, 2024)
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent.
0
0
Attacker Value
Unknown

CVE-2018-16409

Disclosure Date: September 03, 2018 (last updated November 27, 2024)
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.
0
0
Attacker Value
Unknown

CVE-2018-15193

Disclosure Date: August 08, 2018 (last updated November 27, 2024)
A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via a crafted issue / link.
0
0