Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5. (CVE-2022-0870)

  - Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5. (CVE-2022-0871)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5. (CVE-2022-0871)

ID	Name	Product	Family	Severity
427128	Alpine: gogs: security update to 0.12.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
427128	Alpine: gogs: security update to 0.12.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
415332	SCA: security update for gogs.io/gogs (GHSA-gw5h-h6hj-f56g)	Tenable Cloud Security	SCA Checks	critical
415332	SCA: security update for gogs.io/gogs (GHSA-gw5h-h6hj-f56g)	Tenable Self-Hosted Container Security	SCA Checks	critical
411206	SCA: security update for gogs.io/gogs (GHSA-65f3-3278-7m65)	Tenable Cloud Security	SCA Checks	critical
411206	SCA: security update for gogs.io/gogs (GHSA-65f3-3278-7m65)	Tenable Self-Hosted Container Security	SCA Checks	critical

Detections

Analytics

CVE-2022-0871

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical