Gogs - XSS
CVE-2022-32174

9CRITICAL

Key Information:

What is CVE-2022-32174?

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

gogs v0.6.5

gogs <= unspecified

Score:

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Mend Vulnerability Research Team (MVR)