CVE-2014-8683

published 2014-11-21

CVE-2014-8683: Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.8 allows remote attackers to inject…

Priority P4 19 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.8 allows remote attackers to inject arbitrary web script or HTML via the text parameter to api/v1/markdown.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
gogits	gogs	<= 0.5.5	—
gogits	gogs	—	—
gogits	gogs	—	—
gogits	gogs	—	—
gogits	gogs	—	—
gogits	gogs	—	—
gogs.io	gogs	>= 0.3.1 < 0.5.8	0.5.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79