Alpine/gogs: medium 5.4
Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javas
Action: Upgrade gogs to 0.12.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.7-r0 | - |
Fixed versions
| 0.12.7-r0 |
Sources
published · modified · JSON