[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-32174":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":82,"references":85,"score":91,"epss_score":92,"epss_percentile":93,"is_kev":94,"cisa_kev_date_added":95,"cisa_kev_due_date":95,"cisa_ssvc":96,"attack_mappings":106,"exploits":113},315526,"CVE-2022-32174","EUVD-2022-7125","Gogs vulnerable to Cross-site Scripting\n\nIn Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.","2022-10-11T19:00:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":19,"confidentialityImpact":17},"CHANGED","3.1",9,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","HIGH","REQUIRED","LOW",true,[22],"CWE-79",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],"cpe:2.3:a:gogs:gogs:0.12.10:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.10:-:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.9:rc1:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.7.33:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.48:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.8:rc1:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.10:rc:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.7.0:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.6:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.9:-:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.43:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.6.15:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.7.22:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.86:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.2:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.7.19:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.60:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.8.0:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.4:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.6.5:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.29:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.71:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.10.1:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.8:-:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.5:rc1:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.6.9:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.34:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.8.10:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.97:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.113:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.33:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.79:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.46:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.19:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11:-:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.91:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.4:rc1:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.10.8:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.10.18:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.8.25:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.0:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.128:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.7.6:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.141:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.7:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11:rc:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.66:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.8.43:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.82.1218:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.9.13:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.5:-:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.11.53:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.3:*:*:*:*:*:*:*","cpe:2.3:a:gogs:gogs:0.12.4:-:*:*:*:*:*:*","cpe:2.3:a:gogs.io:gogs:*:*:*:*:*:*:*:*","cpe:2.3:a:gogs.io:gogs:0.12.10:*:*:*:*:*:*:*",[83,84],"Gogs Gogs","Gogs.Io Gogs",[86,87,88,89,90],"https:\u002F\u002Fgithub.com\u002Fgogs\u002Fgogs\u002Fblob\u002Fv0.12.10\u002Fpublic\u002Fjs\u002Fgogs.js#L263","https:\u002F\u002Fwww.mend.io\u002Fvulnerability-database\u002FCVE-2022-32174","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2022-32174","https:\u002F\u002Fgithub.com\u002Fgogs\u002Fgogs","https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2022-1060",0.83,0.58021,0.99092,false,null,{"timestamp":97,"automatable":98,"tech_impact":99,"exploitation":100,"cisa_decision":101,"cisa_remediation_timeline":105},"2025-05-16T13:48:52.683526Z","no","total","poc",{"vector":102,"decision":103,"priority":104},"CISAv1\u002FE:P\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T13:36:55.773490\u002F","attend","medium","14D",[107],{"name":108,"source":109,"tactics":110,"technique_id":112},"Exploit Public-Facing Application","attack_vector",[111],"initial-access","T1190",[114,115],{"link":86},{"link":87}]