What’s Vulnerable › Vulnerabilities

CVE-2020-14958

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-21 · updated 2026-06-17
• Weakness: CWE-281

Description

In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.

Affected products

• gogs: 0.11.91

References

• https://github.com/gogs/gogs/commit/82ff0c5852f29daa5f95d965fd50665581e7ea3c
• https://github.com/gogs/gogs/pull/5988
• https://github.com/gogs/gogs/commit/82ff0c5852f29daa5f95d965fd50665581e7ea3c
• https://github.com/gogs/gogs/pull/5988

Get alerted when CVE-2020-14958 or the next vulnerability affects your stack