CVE-2018-15192

An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.

• CWE-918

• https://github.com/go-gitea/gitea/issues/4624Issue Tracking, Third Party Advisory
• https://github.com/gogs/gogs/issues/5366Third Party Advisory
• https://github.com/go-gitea/gitea/issues/4624Issue Tracking, Third Party Advisory
• https://github.com/gogs/gogs/issues/5366Third Party Advisory

Published

Aug 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15186PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.…
• CVE-2018-15187PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF …
• CVE-2018-15188PHP Scripts Mall advanced-real-estate-script 4.0.9 allows re…
• CVE-2018-15189PHP Scripts Mall advanced-real-estate-script has XSS via the…
• CVE-2018-15190PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via t…
• CVE-2018-15191PHP Scripts Mall hotel-booking-script 2.0.4 allows remote at…
• CVE-2018-15193A CSRF vulnerability in the admin panel in Gogs through 0.11…
• CVE-2018-15197An issue was discovered in OneThink v1.1. There is a CSRF vu…
• CVE-2018-15198An issue was discovered in OneThink v1.1. There is a CSRF vu…
• CVE-2018-15199AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action…
• CVE-2018-15202An issue was discovered in Juunan06 eCommerce through 2018-0…
• CVE-2018-15203An issue was discovered in Ignited CMS through 2017-02-19. i…6.5