Gogs has a Protected Branch Deletion Bypass in Web Interface in gogs.io/gogs
Gogs has a Protected Branch Deletion Bypass in Web Interface in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: gogs.io/gogs before v0.14.1.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-25232US | high8.8OT hoch | Exploit | ||
Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability which allows any repository collaborator with Write permission… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/gogs/gogs/commit/7b7e38c88007a7c482dbf31efff896185fd9b79cWEB
- https://github.com/gogs/gogs/pull/8124WEB
- https://github.com/gogs/gogs/releases/tag/v0.14.1WEB
- https://github.com/gogs/gogs/security/advisories/GHSA-2c6v-8r3v-gh6pADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-25232ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan