Lucene search
Veracode Vulnerability DatabaseVERACODE:25745HistoryJun 23, 2020 - 4:38 a.m.
Insecure Direct Object Reference
2020-06-2304:38:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
21.8%
github.com/gogs/gogs is vulnerable to insecure direct object reference. A remote attacker is able to configure and set the primary email address of other users on their behalf.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gogs/gogs | le | 0.11.91 |
Related
gitlab
gitlab
Improper Preservation of Permissions
2021-05-18 00:00:00
osv
osv
Insecure Permissions in Gogs
2021-05-18 20:33:05
CVE-2020-14958
2020-06-21 20:15:09
cve
cve
CVE-2020-14958
2020-06-21 20:15:09
nvd
nvd
CVE-2020-14958
2020-06-21 20:15:09
github
github
Insecure Permissions in Gogs
2021-05-18 20:33:05
prion
prion
Design/Logic Flaw
2020-06-21 20:15:00
cvelist
cvelist
CVE-2020-14958
2020-06-21 19:57:21
openvas
openvas
Gogs < 0.12 Multiple Vulnerabilities
2020-02-24 00:00:00