CVE-2026-52805
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk30th percentile — higher than 30% of all known CVEs
Summary
In Gogs before version 0.14.3, an SSRF vulnerability was found in the repository migration functionality. The application validates only the initially submitted URL hostname, but git clone --mirror follows HTTP redirects. An authenticated user can submit a public URL that redirects to an internal endpoint (e.g., 127.0.0.1), importing the internal repository's contents into an attacker-controlled repository.
Risk Assessment
The risk involves unauthorized access to internal repositories and leakage of sensitive data. An attacker can exploit this vulnerability to exfiltrate source code or other resources stored in the closed network.
Recommendation
Immediately update Gogs to version 0.14.3 or later. As a temporary mitigation, restrict repository migration to trusted users only and block redirects to internal addresses at the firewall level.
Original NVD description (English source)
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request Forgery (SSRF) vulnerability exists in the repository migration functionality. The application validates only the initially submitted URL hostname, but git clone --mirror follows HTTP redirects. An authenticated user can submit a public URL that redirects to a blocked internal endpoint (e.g., 127.0.0.1), importing the internal repository's contents into an attacker-controlled repository. This vulnerability is fixed in 0.14.3.