Security Advisory

CVE-2018-15178

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-08 00:00:00

Last updated 2024-08-05 09:46:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes/user/auth.go.

← Browse all CVEs View on cve.org ↗