medium6.5
CVE-2020-14958
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.
Impact
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gogs | Gogs | Version 0.11.91 |