GO-2020-0021

vendorUSosv

SQL Injection in github.com/gogits/gogs

view advisory published 2021-04-14Licence: per source

Due to improper sanitization of user input, a number of methods are vulnerable to SQL injection if used with user input that has not been sanitized by the caller.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2014-8681UShigh7.5Exploit
SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to exec…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan