Medium severity6.1NVD Advisory· Published Sep 14, 2018· Updated Jun 17, 2026
CVE-2018-17031
CVE-2018-17031
Description
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
gogs.io/gogsGo | < 0.12.0 | 0.12.0 |
Affected products
1Patches
Vulnerability mechanics
References
5- github.com/gogs/gogs/issues/5397nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-px5r-fqj6-r2f8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-17031ghsaADVISORY
- github.com/gogs/gogs/commit/e14b6abf9dae13bc087c9d9db8fe7c7a5125c792ghsaWEB
- github.com/gogs/gogs/pull/6008ghsaWEB
News mentions
0No linked articles in our index yet.