x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-cpgw-2wxr-pww3

[GoVulnBot]

In GitHub Security Advisory GHSA-cpgw-2wxr-pww3, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
gogs.io/gogs	0.12.0	< 0.12.0

Cross references:

• CVE-2018-15178 appears in issue x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-cpgw-2wxr-pww3 #822 NOT_IMPORTABLE
• GHSA-cpgw-2wxr-pww3 appears in issue x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-cpgw-2wxr-pww3 #822 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - fixed: 0.12.0
    packages:
      - package: gogs.io/gogs
description: Open redirect vulnerability in Gogs before 0.12 allows remote attackers
    to redirect users to arbitrary websites and conduct phishing attacks via an initial
    /\ substring in the user/login redirect_to parameter, related to the function
    isValidRedirect in routes/user/auth.go.
cves:
  - CVE-2018-15178
ghsas:
  - GHSA-cpgw-2wxr-pww3

[tatianab]

Duplicate of #822