CVE-2018-15192
published 2018-08-08CVE-2018-15192: An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
PriorityP352high8.6CVSS 3.0
AVNACLPRNUINSCCHINAN
EPSS
2.10%
80.2th percentile
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| code.gitea.io | gitea | >= 0 < 1.27.0 | 1.27.0 |
| code.gitea.io | gitea | >= 0 < 1.16.0-rc1 | 1.16.0-rc1 |
| gitea | gitea | < 1.5.0 | 1.5.0 |
| gitea | gitea | — | — |
| gogs.io | gogs | >= 0 < 0.12.0 | 0.12.0 |
| gogs | gogs | <= 0.11.53 | — |
CVSS provenance
nvdv3.08.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Gitea: Two SSRF findings
ghsa·2026-07-21
CVE-2026-58314 [HIGH] CWE-918 Gitea: Two SSRF findings
Gitea: Two SSRF findings
| --- | --- |
| Versions tested | `gitea/gitea:1.26.2` (digest `sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031`); `gitea/gitea:latest` resolves to the same digest at time of writing |
| Source review | `git checkout v1.26.2` (commit `2c749ce`) |
| Reproduction | `bash run_poc.sh` (single shot: brings up containers, runs three PoCs, prints captured evidence, tears down on exit) |
| Files touched by the fixes | `modules/hostmatcher/hostmatcher.go`, `modules/auth/openid/openid.go` |
## Summary
Gitea guards outbound HTTP from webhooks and repo migration with `net.Dialer.Control`, the correct hook point. The IP classifier behind it misses ten address families, of which CGNAT (100.64.0.0/10) is the practically important one because it is plain
OSV
Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
osv·2024-08-20
CVE-2018-15192 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
OSV
Gogs and Gitea SSRF Vulnerability
osv·2022-05-14
CVE-2018-15192 [HIGH] Gogs and Gitea SSRF Vulnerability
Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
GHSA
Gogs and Gitea SSRF Vulnerability
ghsa·2022-05-14
CVE-2018-15192 [HIGH] CWE-918 Gogs and Gitea SSRF Vulnerability
Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-08-08
Published