Lucene search
GoogleOSV:GHSA-7V5R-R995-Q2X2HistoryMar 12, 2022 - 12:00 a.m.
SSRF in repository migration
2022-03-1200:00:34
Google
osv.dev
7
0.001 Low
EPSS
Percentile
50.8%
Gogs is a self-hosted Git service. The malicious user is able to discover services in the internal network through repository migration functionality. All installations accepting public traffic are affected. Internal network CIDRs are prohibited to be used as repository migration targets. Users should upgrade to 0.12.5 or the latest 0.13.0+dev. Gogs should be ran in its own private network until users can update.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gogs.io/gogs | lt | 0.12.5 |
Related
nuclei
nuclei
Gogs <0.12.5 - Server-Side Request Forgery
2022-04-02 10:56:03
nvd
nvd
CVE-2022-0870
2022-03-11 11:15:07
veracode
veracode
Server-side Request Forgery (SSRF)
2022-03-14 04:40:24
prion
prion
Server side request forgery (ssrf)
2022-03-11 11:15:00
cvelist
cvelist
CVE-2022-0870 Server-Side Request Forgery (SSRF) in gogs/gogs
2022-03-11 10:40:09
cve
cve
CVE-2022-0870
2022-03-11 11:15:07
github
github
SSRF in repository migration
2022-03-12 00:00:34
alpinelinux
alpinelinux
CVE-2022-0870
2022-03-11 11:15:07
gitlab
gitlab
SSRF in repository migration
2022-03-12 00:00:00
huntr
huntr
Server-Side Request Forgery (SSRF) in gogs/gogs
2021-07-17 10:23:17
osv
osv
CVE-2022-0870
2022-03-11 11:15:07
openvas
openvas
Gogs < 0.12.5 Multiple Vulnerabilities
2022-03-16 00:00:00