Known vulnerabilities in gogs - page 4

Vendor: gogs.io
Software: gogs
Software CPE: cpe:2.3:a:gogs.io:gogs:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gogs gogs is affected by 71 known vulnerabilities: 12 high, 30 medium, 29 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129673 - Server-Side Request Forgery (SSRF)
CVE-2022-0870
CWE-918 Medium
No
No
0.12.5 05.05.2026 SB2022031215
#VU129659 - Improper Authorization
CVE-2022-0871
CWE-285 High
No
No
0.12.5 05.05.2026 SB2022031215
#VU128086 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-80 Low
No
No
0.12.8 31.05.2022 SB2022053153
#VU128088 - Server-Side Request Forgery (SSRF)
CVE-2022-1285
CWE-918 Low
No
No
0.12.8 31.05.2022 SB2022053153
#VU128089 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1464
CWE-79 Low
No
No
0.12.7 05.05.2022 SB2022050545
#VU128090 - Improper input validation
CVE-2022-0415
CWE-20 Medium
No
No
0.12.6 21.03.2022 SB2022032146
#VU34206 - Improper input validation
CVE-2020-14958
CWE-20 Medium
No
No
- 21.06.2020 SB2020062103
#VU35645 - Improper input validation
CVE-2019-14544
CWE-20 High
No
No
- 03.08.2019 SB2019080308
#VU36698 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17031
CWE-79 Low
No
No
- 14.09.2018 SB2018080816
#VU36735 - Server-Side Request Forgery (SSRF)
CVE-2018-16409
CWE-918 High
No
No
- 03.09.2018 SB2018080816
#VU36784 - Cross-Site Request Forgery (CSRF)
CVE-2018-15193
CWE-352 High
No
No
- 08.08.2018 SB2018080816


Showing elements 61 - 80 out of 71