GHSA-5r2v-6gm6-vpvh

ghsaUSosv

Insecure Permissions in Gogs

view advisory published 2021-05-18Licence: CC-BY-4.0

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-14544US	critical9.8OT elevated	1.53% (75th)	—	2019-08-02
routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.