CVE-2018-15178

2018-08-0800:29:02

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes/user/auth.go.

CPENameOperatorVersion
gogseq0.11.34
gogseq0.4.1
gogseq0.11.91
gogseq0.5.0
gogseq0.7.6
gogseq0.4.2
gogseq0.9.48
gogseq0.5.9
gogseq0.9.128
gogseq0.11.66