Lucene search

GitHub Advisory DatabaseGHSA-PX5R-FQJ6-R2F8

HistoryMay 14, 2022 - 2:01 a.m.

Gogs XSS Vulnerability

2022-05-1402:01:21

CWE-79

GitHub Advisory Database

github.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

29.5%

JSON

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an “X-Content-Type-Options: nosniff” header is not sent.

Affected configurations

Vulners

Node

gogs.iogogsRange≤0.11.53

CPENameOperatorVersion
gogs.io/gogsle0.11.53

CPE	Name	Operator	Version
	gogs.io/gogs	le	0.11.53

References

github.com/advisories/GHSA-px5r-fqj6-r2f8

github.com/gogs/gogs/commit/e14b6abf9dae13bc087c9d9db8fe7c7a5125c792

github.com/gogs/gogs/issues/5397

github.com/gogs/gogs/pull/6008

nvd.nist.gov/vuln/detail/CVE-2018-17031

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

29.5%

JSON

Related for GHSA-PX5R-FQJ6-R2F8