Vulnerabilities > Gogs > Gogs > 0.12

DATE CVE VULNERABILITY TITLE RISK
2022-03-11 CVE-2022-0871 Missing Authorization vulnerability in Gogs
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.
network
low complexity
gogs CWE-862
critical
9.1
2022-03-11 CVE-2022-0870 Server-Side Request Forgery (SSRF) vulnerability in Gogs
Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.
network
low complexity
gogs CWE-918
5.0
2020-10-16 CVE-2020-15867 Unspecified vulnerability in Gogs
The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution.
network
low complexity
gogs
6.5