← All advisories

High severityNVD Advisory· Published Jun 1, 2022· Updated Aug 2, 2024

Server-Side Request Forgery (SSRF) in gogs/gogs

CVE-2022-1285

Description

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gogs.io/gogsGo	< 0.12.8	0.12.8

Affected products

2

ghsa-coords
pkg:golang/gogs.io/gogs
Range: < 0.12.8
Gogs/Gogscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-w689-557m-2cvqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-1285ghsaADVISORY
github.com/gogs/gogs/commit/7885f454a4946c4bbec1b4f8c603b5eea7429c7fghsax_refsource_MISCWEB
github.com/gogs/gogs/security/advisories/GHSA-w689-557m-2cvqghsaWEB
huntr.dev/bounties/da1fbd6e-7a02-458e-9c2e-6d226c47046dghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.