{"action":"Upgrade gogs.io/gogs to 0.5.8 or later.","affected":[{"fixed":"0.5.8","introduced":"0.3.1"}],"component":"gogs.io/gogs","cve_ids":["CVE-2014-8683"],"ecosystem":"Go","epss":0.01909,"exploited":false,"fixed_versions":["0.5.8"],"ghsa_id":"GHSA-9hx4-qm7h-x84j","id":"tcs_01M5KF5RTETPWCG7TGZRV6ECD6","modified_at":"2024-08-21T15:41:46.572889Z","published_at":"2021-06-29T18:32:53Z","references":["https://osv.dev/vulnerability/GHSA-9hx4-qm7h-x84j","https://nvd.nist.gov/vuln/detail/CVE-2014-8683","https://github.com/gogits/gogs/commit/3abc41cccab2486012b46305827433ad6f5deade","https://exchange.xforce.ibmcloud.com/vulnerabilities/98693","https://github.com/gogits/gogs/releases/tag/v0.5.8","https://gogs.io/docs/intro/change_log.html","https://packetstormsecurity.com/files/129118/Gogs-Markdown-Renderer-Cross-Site-Scripting.html","https://seclists.org/fulldisclosure/2014/Nov/31","https://seclists.org/fulldisclosure/2014/Nov/34","https://www.securityfocus.com/archive/1/533996/100/0/threaded"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9hx4-qm7h-x84j","url":"https://osv.dev/vulnerability/GHSA-9hx4-qm7h-x84j"}],"summary":"Cross-site Scripting in Gogs"}