Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2022-32174

Gogs - XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gogs gogs

  • v0.6.5 to < unspecifiedaffected
  • unspecified to ≤ v0.12.10affected

References