Open redirect vulnerability in Gogs prior to 0.12 allows remote malicious users to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes/user/auth.go.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
gogs gogs |
Vulmon