WEB Gogs Full Name Stored Cross-Site Scripting (CVE-2022-32174)

Rule ID

1231787

Severity

Critical

Description

A stored cross-site scripting vulnerability has been reported for Gogs. This vulnerability is due to improper validation of full names. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A