CVE-2019-14544

routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks.

• CWE-862

• https://github.com/gogs/gogs/issues/5764Issue Tracking, Patch, Third Party Advisory
• https://github.com/gogs/gogs/issues/5764Issue Tracking, Patch, Third Party Advisory

Published

Aug 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14534In VideoLAN VLC media player 3.0.7.1, there is a NULL pointe…
• CVE-2019-14535A divide-by-zero error exists in the SeekIndex function of d…
• CVE-2019-14537YOURLS through 1.7.3 is affected by a type juggling vulnerab…
• CVE-2019-1454An elevation of privilege vulnerability exists when the Wind…5.5
• CVE-2019-14540A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-14541GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_…
• CVE-2019-14546An issue was discovered in EspoCRM before 5.6.9. Stored XSS …
• CVE-2019-14547An issue was discovered in EspoCRM before 5.6.9. Stored XSS …
• CVE-2019-14548An issue was discovered in EspoCRM before 5.6.9. Stored XSS …
• CVE-2019-14549An issue was discovered in EspoCRM before 5.6.9. Stored XSS …
• CVE-2019-1455Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14550An issue was discovered in EspoCRM before 5.6.9. Stored XSS …