CVE-2022-32174 Gogs - XSS

2022-10-0600:00:00

CWE-79

Mend

www.cve.org

gogs

xss

vulnerability

account takeover

8.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

CNA Affected

[
  {
    "vendor": "gogs",
    "product": "gogs",
    "versions": [
      {
        "version": "v0.6.5",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "v0.12.10",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]