CVE-2018-15192

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-15192
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15192.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-15192
Aliases
Published
2018-08-08T02:29:00.273Z
Modified
2026-07-08T05:53:18.219521595Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "vendor_product": "gitea:gitea",
            "extracted_events": [
                {
                    "introduced": "1.5.0-rc1"
                },
                {
                    "last_affected": "1.5.0-rc1"
                }
            ],
            "cpes": [
                "cpe:2.3:a:gitea:gitea:1.5.0:rc1:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/go-gitea/gitea

Affected ranges

Type
GIT
Repo
https://github.com/go-gitea/gitea
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
280ebcbf7c761a212fb091634384847a38f25cb0
Introduced
280ebcbf7c761a212fb091634384847a38f25cb0
Last affected
40bbc7320c1aca8433289fae4e2cc14ca7cc2931
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:gitea:gitea:1.5.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:gitea:gitea:1.5.0:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.5.0"
        },
        {
            "introduced": "1.5.0-rc1"
        },
        {
            "last_affected": "1.5.0-rc1"
        },
        {
            "introduced": "1.5.0-rc2"
        },
        {
            "last_affected": "1.5.0-rc2"
        }
    ]
}

Affected versions

1.*
1.5.0-rc1
1.5.0-rc2
v0.*
v0.9.99
v1.*
v1.0.0
v1.1.0
v1.5.0-dev
v1.5.0-rc1
v1.5.0-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15192.json"

Git / github.com/gogs/gogs

Affected ranges

Type
GIT
Repo
https://github.com/gogs/gogs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
91441c3fb29d8ead645d8fffa4658d749d5b3fc3
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.11.53"
        }
    ]
}

Affected versions

v0.*
v0.10
v0.10.18
v0.10.8
v0.10rc
v0.11
v0.11.19
v0.11.29
v0.11.33
v0.11.34
v0.11.4
v0.11.43
v0.11.53
v0.11rc
v0.2.0
v0.3.0
v0.3.1
v0.4.0
v0.4.1
v0.4.2
v0.5.0
v0.5.11
v0.5.13
v0.5.2
v0.5.5
v0.5.8
v0.5.9
v0.6.1
v0.6.15
v0.6.3
v0.6.9
v0.7.0
v0.7.19
v0.7.22
v0.7.33
v0.7.6
v0.8.0
v0.8.10
v0.8.25
v0.8.43
v0.9.0
v0.9.113
v0.9.128
v0.9.13
v0.9.141
v0.9.46
v0.9.48
v0.9.60
v0.9.71
v0.9.97

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15192.json"