CVE-2022-32174

Published: Oct 11, 2022

Modified: May 16, 2025

PUBLISHED

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

Vendor	Product	Versions
gogs	gogs	affected `v0.6.5 - < unspecified` affected `unspecified - <= v0.12.10`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.