DeutschShown in its original language — a full translation is planned for a future version.
Gogs: Mehrere Schwachstellen
view advisory published 2026-06-18
Ein Angreifer kann mehrere Schwachstellen in Gogs ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen – sogar mit erweiterten Berechtigungen, was zur vollständigen Kontrolle über das System führen kann –, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen, Benutzer auf bösartige Websites umzuleiten oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (28)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-52816US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipynb allows arbitrary data: URIs without p… | ||||
| CVE-2026-52815US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at i… | ||||
| CVE-2026-52814US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service (DoS) attack. The… | ||||
| CVE-2026-52813US | — | Exploit | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are… | ||||
| CVE-2026-52812US | —OT elevated | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone (<LFS-root>/<oid[0]>/<oid[1]>/<oid>) but per-repo authorization l… | ||||
| CVE-2026-52811US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the leaf of the upload target (osx.IsSymlink(targetPath))… | ||||
| CVE-2026-52810US | — | Exploit | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/git-receive-pack using the client-supplied service query string (so ?service=git-u… | ||||
| CVE-2026-52809US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives (the account-activation lifetime), not conf.A… | ||||
| CVE-2026-52808US | —OT elevated | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/issue-tracker, PATCH /api/v1/repos/:owner/:repo/wiki, and PO… | ||||
| CVE-2026-52807US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names are rendered with Go's default auto-escaping ({{.Name}}), which converts < to <… | ||||
| CVE-2026-52806US | — | Exploit | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request wit… | ||||
| CVE-2026-52805US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request Forgery (SSRF) vulnerability exists in the repository migration functionality. The applicatio… | ||||
| CVE-2026-52804US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to owner-level access by exploiting an off-by-one err… | ||||
| CVE-2026-52802US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, an open redirect vulnerability exists in Gogs where attacker-controlled redirect_to parameters can bypass validatio… | ||||
| CVE-2026-52801US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alternative way from the well protected New Migration functionali… | ||||
| CVE-2026-52800US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is a… | ||||
| CVE-2026-52799US | —OT elevated | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET /attachments/:uuid returns the raw attachment file without verifying whether the requester has view permission… | ||||
| CVE-2026-52798US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, although .ipynb previews are sanitized on the server side via /-/api/sanitize_ipynb, the inserted content is re-ren… | ||||
| CVE-2026-52796US | — | — | ||
Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of service. In internal… | ||||
| CVE-2026-52795US | —OT elevated | — | ||
Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can watch a private repository they have no access to, because the access check in the… | ||||
showing 20 of 28
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-268j-37xf-pp52 vom 2026-06-18external
- GitHub Security Advisory GHSA-3qq3-668m-v9mj vom 2026-06-18external
- GitHub Security Advisory GHSA-3w28-36p9-w929 vom 2026-06-18external
- GitHub Security Advisory GHSA-4565-r4x7-hg8j vom 2026-06-18external
- GitHub Security Advisory GHSA-4j89-2c4f-44c6 vom 2026-06-18external
- GitHub Security Advisory GHSA-5c3f-6486-3g7g vom 2026-06-18external
- GitHub Security Advisory GHSA-6p9m-q3jp-47h4 vom 2026-06-18external
- GitHub Security Advisory GHSA-6vxv-wg6j-5qwp vom 2026-06-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan