Lucene search
Veracode Vulnerability DatabaseVERACODE:22769HistoryMar 24, 2020 - 2:48 a.m.
Cross-Site Scripting (XSS)
2020-03-2402:48:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
29.5%
github.com/gogs/gogs is vulnerable to cross-site scripting (XSS). The x-content-type-options header value is not configured to nosniff, which causes the user’s browser to perform mime-type sniffing when viewing a raw file. This can lead to arbitrary execution of Javascript in a raw file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gogs/gogs | eq | HEAD | |
| github.com/gogs/gogs | eq | HEAD |
Related
cve
cve
CVE-2018-17031
2018-09-14 02:29:00
prion
prion
Design/Logic Flaw
2018-09-14 02:29:00
nvd
nvd
CVE-2018-17031
2018-09-14 02:29:00
github
github
Gogs XSS Vulnerability
2022-05-14 02:01:21
osv
osv
Gogs XSS Vulnerability
2022-05-14 02:01:21
CVE-2018-17031
2018-09-14 02:29:00
cvelist
cvelist
CVE-2018-17031
2018-09-14 02:00:00