PatchTheCVEgogits vulnerabilities
Recent CVEs affecting gogits products. 3 tracked.
gogits has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2014-11-21. Highest priority: CVE-2014-8682 (score 56/100).
- CVE-2014-8683 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x
- CVE-2014-8682 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Be
- CVE-2014-8681 HIGH 7.5 UPGRADE SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9
FAQ
How do I fix gogits vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gogits being exploited right now?
None of the tracked gogits CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gogits CVE should I patch first?
CVE-2014-8682 currently ranks highest (56/100): Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Be.