CVE-2020-14958

Publication date

2020-06-21 19:57:21

Family

mitre

State

PUBLISHED

Description

In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.