CVE-2022-1464
05.05.2022, 14:15
Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .
| Vendor | Product | Version |
|---|---|---|
| gogs | gogs | 𝑥 < 0.12.7 |
𝑥
= Vulnerable software versions