GHSA-9hx4-qm7h-x84jMedium

Cross-site Scripting in Gogs

Published
June 29, 2021
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2014-8683 →

📋 Description

Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.8 allows remote attackers to inject arbitrary web script or HTML via the text parameter to api/v1/markdown.

🎯 Affected products1

  • go/gogs.io/gogs:>= 0.3.1, < 0.5.8

🔗 References (10)