id: GO-2023-1972
modules:
    - module: gogs.io/gogs
      versions:
        - fixed: 0.12.0
      vulnerable_at: 0.11.91
summary: Gogs XSS Vulnerability in gogs.io/gogs
cves:
    - CVE-2018-17031
ghsas:
    - GHSA-px5r-fqj6-r2f8
references:
    - advisory: https://github.com/advisories/GHSA-px5r-fqj6-r2f8
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2018-17031
    - web: https://github.com/gogs/gogs/commit/e14b6abf9dae13bc087c9d9db8fe7c7a5125c792
    - web: https://github.com/gogs/gogs/issues/5397
    - web: https://github.com/gogs/gogs/pull/6008
source:
    id: GHSA-px5r-fqj6-r2f8
    created: 2024-08-20T11:57:34.044982-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE