Security Advisory

CVE-2018-17031

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-14 02:00:00

Last updated 2024-08-05 10:39:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent.

← Browse all CVEs View on cve.org ↗