Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-15192US | high8.6 | — | ||
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/go-gitea/gitea/commit/599ff1c054e436daa4dc3f049aa8661d9c2395f9WEB
- https://github.com/go-gitea/gitea/issues/4624WEB
- https://github.com/go-gitea/gitea/pull/17482WEB
- https://github.com/gogs/gogs/commit/22717a1c064511cf37c46af5e650baf7184cf25bWEB
- https://github.com/gogs/gogs/issues/5366WEB
- https://github.com/gogs/gogs/pull/6002WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-15192ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan