← Back to browse
·
API
CVE-2024-39932
Severity
CRITICAL
CVSS
9.9
EPSS
0.17315
Risk score
45.66
CISA KEV
No
PoC
No
Published
2024-07-04
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2024-3572, GHSA-9PP6-WQ8C-3W2C
Products
n/a:n/a n/a
Sources
euvd
EUVD-2024-3572
Description
Gogs through 0.13.0 allows argument injection during the previewing of changes.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-3572
https://github.com/gogs/gogs/releases
https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/