| module: github.com/gogits/gogs |
| versions: |
| - fixed: v0.5.8 |
| description: | |
| Due to improper santization of user input, a number of methods are |
| vulnerable to SQL injection if used with user input that has not |
| been santized by the caller. |
| published: 2021-04-14T12:00:00Z |
| cve: CVE-2014-8681 |
| credit: Pascal Turbing and Jiahua (Joe) Chen |
| symbols: |
| - GetIssues |
| - SearchRepositoryByName |
| - SearchUserByName |
| links: |
| commit: https://github.com/gogs/gogs/commit/83283bca4cb4e0f4ec48a28af680f0d88db3d2c8 |
| context: |
| - https://seclists.org/fulldisclosure/2014/Nov/31 |
