CVE-2022-0870: Server-Side Request Forgery (SSRF) in gogs/gogs
Published Mar 11, 2022
·Updated
Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.
Affected Software
7 affected componentsFixes available
Gogs Gogs<0.12.5
alpine/gogs<0.12.6-r0
0.12.6-r0
alpine/gogs<0.12.6-r0
0.12.6-r0
alpine/gogs<0.12.6-r0
0.12.6-r0
alpine/gogs<0.12.6-r0
0.12.6-r0
alpine/gogs<0.12.6-r0
0.12.6-r0
alpine/gogs<0.12.6-r0
0.12.6-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/gogsto a version that resolves this vulnerability.Fixed in 0.12.6-r0
Event History
Mar 11, 2022
CVE Published
via MITRE·10:40 AM
Data Sourced
via MITRE·10:40 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·11:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-0870.
2
What is the severity rating of CVE-2022-0870?
The severity rating of CVE-2022-0870 is medium (5.3).
3
What is the affected software of CVE-2022-0870?
The affected software of CVE-2022-0870 is Gogs Gogs prior to version 0.12.5.
4
What is the vulnerability description of CVE-2022-0870?
CVE-2022-0870 is a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository gogs/gogs prior to 0.12.5.
5
How can I fix CVE-2022-0870?
To fix CVE-2022-0870, update Gogs Gogs to version 0.12.5 or later.