| module: github.com/gogits/gogs | |
| versions: | |
| - fixed: v0.5.8 | |
| description: | | |
| Multiple methods are vulnerable to SQL injection attacks as unsanitized | |
| user input is used to construct SQL statements. | |
| published: 2021-04-14T12:00:00Z | |
| cve: CVE-2014-8681 | |
| credit: Pascal Turbing and Jiahua (Joe) Chen | |
| symbols: | |
| - GetIssues | |
| - SearchRepositoryByName | |
| - SearchUserByName | |
| links: | |
| commit: https://github.com/gogs/gogs/commit/83283bca4cb4e0f4ec48a28af680f0d88db3d2c8 | |
| context: | |
| - https://seclists.org/fulldisclosure/2014/Nov/31 |