VDB
CVE-2022-1285
CVE-2022-1285
PUBLISHED
CVSS 8.300000190734863 HIGH
Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.
EPSS 0.79% · 74.2th percentile
Risk Scores
CVSS v3.0
8.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS Score
0.79%
74.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| gogs | gogs | 0 |
| gogs | gogs/gogs | unspecified |
| gogs.io | gogs | 0 |
Timeline
- Jun 1, 2022 EPSS Score
- Jun 1, 2022 CVE Published
- Jul 20, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Dec 13, 2022 EPSS Score
- Jan 30, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 20, 2023 EPSS Score
- May 7, 2023 EPSS Score
- Aug 12, 2023 EPSS Score
- Sep 30, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
References
- https://huntr.dev/bounties/da1fbd6e-7a02-458e-9c2e-6d226c47046d url
- https://github.com/gogs/gogs/commit/7885f454a4946c4bbec1b4f8c603b5eea7429c7f url
- https://github.com/gogs/gogs/security/advisories/GHSA-w689-557m-2cvq url
- https://nvd.nist.gov/vuln/detail/CVE-2022-1285 advisory
- https://github.com/gogs/gogs package