Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/gogs/gogs ↗ | |
| c154721f4a8f3e24d2f6fb61e74b4b64529255c2 through c154721f4a8f3e24d2f6fb61e74b4b64529255c2 | No fix listed |
| Not specified | 82ff0c5852f29daa5f95d965fd50665581e7ea3c |
Also listed as affected (2)
| |
Description
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.