Vulnerability advisory
GO-2020-0021
SQL Injection in github.com/gogits/gogs
Also known as CVE-2014-8681GHSA-mr6h-chqp-p9g2
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 0.5.8 | 0.5.8 |
Description
Due to improper sanitization of user input, a number of methods are vulnerable to SQL injection if used with user input that has not been sanitized by the caller.