CVE-2022-1464

Published: 2022-05-05T14:15Z

Last Modified: 2024-11-21T06:40Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account . > MITRE Terms of Use apply – see LICENSE‑MITRE.txt