Lucene search
MitreCVELIST:CVE-2018-17031HistorySep 14, 2018 - 2:00 a.m.
CVE-2018-17031
2018-09-1402:00:00
mitre
www.cve.org
0.001 Low
EPSS
Percentile
29.5%
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an “X-Content-Type-Options: nosniff” header is not sent.
References
Related
cve
cve
CVE-2018-17031
2018-09-14 02:29:00
github
github
Gogs XSS Vulnerability
2022-05-14 02:01:21
prion
prion
Design/Logic Flaw
2018-09-14 02:29:00
nvd
nvd
CVE-2018-17031
2018-09-14 02:29:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-03-24 02:48:21
osv
osv
Gogs XSS Vulnerability
2022-05-14 02:01:21
CVE-2018-17031
2018-09-14 02:29:00