critical9.8
CVE-2019-14544
Insecure Permissions in Gogs
Impact
routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | gogs.io/gogs | < 0.11.91 | 0.11.91 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gogs | Gogs | Version 0.11.86 |