VYPR
← All advisories
Moderate severityNVD Advisory· Published Nov 21, 2014· Updated Jun 17, 2026

CVE-2014-8681

CVE-2014-8681

Description

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
gogs.io/gogsGo
>= 0.3.1, < 0.5.80.5.8
github.com/gogits/gogsGo
>= 0.3.1, < 0.5.80.5.8

Affected products

8
  • Gogs/Gogs6 versions
    cpe:2.3:a:gogits:gogs:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:gogits:gogs:*:*:*:*:*:*:*:*range: <=0.5.5
    • cpe:2.3:a:gogits:gogs:0.3.1-9:*:*:*:*:*:*:*
    • cpe:2.3:a:gogits:gogs:0.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gogits:gogs:0.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:gogits:gogs:0.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gogits:gogs:0.5.2:*:*:*:*:*:*:*
  • ghsa-coords2 versions
    pkg:golang/github.com/gogits/gogspkg:golang/gogs.io/gogs
    >= 0.3.1, < 0.5.8+ 1 more
    • (no CPE)range: >= 0.3.1, < 0.5.8
    • (no CPE)range: >= 0.3.1, < 0.5.8

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.