Executive Summary

This vulnerability affects Gogs, an open source self-hosted Git service, in versions prior to 0.14.3. When the ENABLE_REVERSE_PROXY_AUTHENTICATION setting is enabled, Gogs accepts an authentication header (default: X-WEBAUTH-USER) directly from client requests without verifying that the request actually comes from a trusted reverse proxy.

Because of this lack of validation, any remote attacker who can reach the Gogs service can forge this header to impersonate any user or even trigger automatic account creation, effectively bypassing authentication controls.

This security flaw is fixed in version 0.14.3.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to impersonate any user or create accounts automatically without proper authentication.

As a result, unauthorized users could gain access to sensitive repositories or data, potentially leading to data breaches, unauthorized code changes, or exposure of confidential information.

The complete bypass of authentication mechanisms undermines the security of the Gogs service and any projects hosted on it.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade Gogs to version 0.14.3 or later where the issue is fixed.

Additionally, ensure that the ENABLE_REVERSE_PROXY_AUTHENTICATION setting is configured properly and that the authentication header (default: X-WEBAUTH-USER) is only accepted from trusted reverse proxies.

Useful 0 Not Useful 0