CVE-2022-0871

Missing Authorization in gogs/gogs

CVSS 8.2 HIGHEPSS 1.4%CWE-862

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Affected products

gogs · gogs/gogs

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/gogs/gogs/commit/64102be2c90e1b47dbdd379873ba76c80d4b0e78 https://huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62