VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026

CVE-2022-1464

CVE-2022-1464

Description

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
gogs.io/gogsGo
< 0.12.70.12.7

Affected products

3
  • ghsa-coords
    pkg:golang/gogs.io/gogs
    Range: < 0.12.7
  • Gogs/Gogscpe-rescue2 versions
    unspecified+ 1 more
    • (no CPE)range: unspecified
    • cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*range: <0.12.7

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.