Executive Summary

This vulnerability exists in Gogs, an open source self-hosted Git service, in versions prior to 0.14.3. Although .ipynb file previews are sanitized on the server side, the content is re-rendered on the client side without proper sanitization. Specifically, links with dangerous schemes like javascript: can be regenerated during client-side rendering. When a user views a maliciously crafted .ipynb file and clicks such a link, arbitrary JavaScript code executes within the Gogs origin, resulting in a click-based Stored Cross-Site Scripting (XSS) attack.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to arbitrary JavaScript execution in the context of the Gogs application. An attacker can exploit this by crafting malicious .ipynb files that, when viewed and interacted with by a victim, execute harmful scripts. This can result in unauthorized actions, data theft, session hijacking, or other malicious activities within the affected Gogs instance.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Gogs to version 0.14.3 or later, where the issue has been fixed.

Useful 0 Not Useful 0