{"id":"CVE-2020-14958","published":"2020-06-21T19:57:21Z","modified":"2024-08-04T13:00:52Z","title":"In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a \"not the owner of the email\" check","vendor":null,"product":null,"tier":"tail","description":{"text":"In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a \"not the owner of the email\" check.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0093,"percentile":0.60331,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/gogs/gogs/commit/82ff0c5852f29daa5f95d965fd50665581e7ea3c","tags":["x_refsource_MISC"]},{"url":"https://github.com/gogs/gogs/pull/5988","tags":["x_refsource_MISC"]}],"priority":{"score":12.1,"factors":[{"name":"EPSS percentile","points":12.07}]},"affected":[{"ecosystem":"Go","package":"gogs.io/gogs","vulnerableRanges":["<0.12.0"],"patched":["0.12.0"],"from":["GHSA-4c7m-vv47-7c69","GO-2022-0788"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-0934","exploited":false,"provenance":"source"}}