Vulnerability Report: GO-2020-0021
- CVE-2014-8681, GHSA-mr6h-chqp-p9g2
- Affects: github.com/gogits/gogs
- Published: Apr 14, 2021
- Modified: Jun 12, 2023
Due to improper sanitization of user input, a number of methods are vulnerable to SQL injection if used with user input that has not been sanitized by the caller.
Affected Packages
-
PathVersionsSymbols
-
before v0.5.8
Aliases
References
- https://github.com/gogs/gogs/commit/83283bca4cb4e0f4ec48a28af680f0d88db3d2c8
- https://seclists.org/fulldisclosure/2014/Nov/31
- https://vuln.go.dev/ID/GO-2020-0021.json
Credits
- Pascal TurbingJiahua (Joe) Chen
Feedback
See anything missing or incorrect?
Suggest an edit to this report.