Lucene search
Veracode Vulnerability DatabaseVERACODE:20985HistoryAug 05, 2019 - 3:01 a.m.
Missing Permission Checks
2019-08-0503:01:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
60.5%
github.com/gogs/gogs is vulnerable to missing permission checks. The function RegisterRoutes in routes/api/v1/api.g does not invoke the reqAdmin method to perform permission checks for deploy keys, collaborators, and hooks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gogs/gogs | eq | HEAD | |
| github.com/gogs/gogs | le | 0.11.86 |
References
Related
osv
osv
CVE-2019-14544
2019-08-02 22:15:14
Insecure Permissions in Gogs
2021-05-18 17:33:58
nvd
nvd
CVE-2019-14544
2019-08-02 22:15:14
github
github
Insecure Permissions in Gogs
2021-05-18 17:33:58
openvas
openvas
Gogs < 0.11.91 Improper Access Vulnerability
2019-08-05 00:00:00
gitlab
gitlab
Missing Authorization
2021-05-18 00:00:00
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
cve
cve
CVE-2019-14544
2019-08-02 22:15:14
cvelist
cvelist
CVE-2019-14544
2019-08-02 21:17:37