CVE-2014-8681
gogits gogs: no CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days. Fixed in gogs.io/gogs 0.5.8.
SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues.
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gogits:gogs
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mr6h-chqp-p9g2 | Go | gogs.io/gogs | >=0.3.1 <0.5.8 | 0.5.8 |
| GHSA-mr6h-chqp-p9g2 | Go | github.com/gogits/gogs | >=0.3.1 <0.5.8 | 0.5.8 |
| GO-2020-0021 | Go | github.com/gogits/gogs | <0.5.8 | 0.5.8 |