← Back to browse · API

CVE-2022-32174

Severity
CRITICAL
CVSS
9.0
EPSS
0.58021
Risk score
56.31
CISA KEV
No
PoC
No
Published
2022-10-11
Modified
2025-05-16
First seen
2026-08-07
Aliases
EUVD-2022-7125, GHSA-MCJJ-2FVQ-MC3R
Products
gogs:gogs unspecified ≤v0.12.10, gogs:gogs v0.6.5 <unspecified
Sources
euvd EUVD-2022-7125

Description

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

References