← All advisories

Medium severity6.5NVD Advisory· Published Jun 1, 2022· Updated Jun 17, 2026

CVE-2022-1285

CVE-2022-1285

Description

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gogs.io/gogsGo	< 0.12.8	0.12.8

Affected products

3

ghsa-coords
pkg:golang/gogs.io/gogs
Range: < 0.12.8
Gogs/Gogscpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*range: <0.12.8

Patches

Vulnerability mechanics

References

5

github.com/gogs/gogs/commit/7885f454a4946c4bbec1b4f8c603b5eea7429c7fnvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/da1fbd6e-7a02-458e-9c2e-6d226c47046dnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-w689-557m-2cvqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-1285ghsaADVISORY
github.com/gogs/gogs/security/advisories/GHSA-w689-557m-2cvqghsaWEB

News mentions

0

No linked articles in our index yet.