CVE-2025-64719 (GCVE-0-2025-64719)
Vulnerability from cvelistv5 – Published: 2026-06-24 20:03 – Updated: 2026-06-25 20:05
VLAI
EPSS
VEX
Title
Gogs: Denial of Service in repository/wiki file listing web pages
Summary
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3.
Severity
4.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-25 20:05 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://github.com/gogs/gogs/security/advisories/… | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64719",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-25T20:05:48.807800Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-25T20:05:56.250Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gogs",
"vendor": "gogs",
"versions": [
{
"status": "affected",
"version": "\u003c 0.14.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-24T20:03:07.239Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj"
}
],
"source": {
"advisory": "GHSA-3qq3-668m-v9mj",
"discovery": "UNKNOWN"
},
"title": "Gogs: Denial of Service in repository/wiki file listing web pages"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-64719",
"datePublished": "2026-06-24T20:03:07.239Z",
"dateReserved": "2025-11-10T14:07:42.922Z",
"dateUpdated": "2026-06-25T20:05:56.250Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-64719",
"date": "2026-10-05",
"epss": "0.0044",
"percentile": "0.36043"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"product": "gogs",
"vendor": "gogs",
"versions": [
{
"status": "affected",
"version": "\u003c 0.14.3"
}
]
}
],
"source": "security-advisories@github.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3."
},
{
"lang": "es",
"value": "Gogs es un servicio Git autoalojado de c\u00f3digo abierto. Anteriormente a la 0.14.3, un usuario malicioso con derechos para crear un nuevo archivo en un repositorio o p\u00e1gina wiki puede desencadenar una condici\u00f3n de denegaci\u00f3n de servicio en la que las p\u00e1ginas que contienen el listado de archivos devolver\u00e1n el error HTTP 500 y har\u00e1n que la interfaz web sea inutilizable para el repositorio o la wiki. El problema est\u00e1 presente en los archivos internal/route/repo/wiki.go e internal/route/repo/view.go, donde las p\u00e1ginas intentan recuperar informaci\u00f3n de commit. Si se devuelven errores mientras se recupera la informaci\u00f3n de commit, la p\u00e1gina devolver\u00e1 un error 500 y dejar\u00e1 de renderizarse, lo que resultar\u00e1 en una denegaci\u00f3n de servicio. Esta vulnerabilidad se ha corregido en la versi\u00f3n 0.14.3."
}
],
"id": "CVE-2025-64719",
"lastModified": "2026-10-05T16:10:00.443",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6,
"source": "security-advisories@github.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-64719",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-25T20:05:48.807800Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-06-24T21:16:52.007",
"references": [
{
"source": "security-advisories@github.com",
"url": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
}
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-07-31T00:59:34Z",
"cve": "CVE-2025-64719",
"id": "CVE-2025-64719",
"initial_release_date": "2026-07-31T00:59:34Z",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2025-64719",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-64719.json",
"version": "2"
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64719",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-25T20:05:48.807800Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-25T20:05:53.570Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gogs",
"vendor": "gogs",
"versions": [
{
"status": "affected",
"version": "\u003c 0.14.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-24T20:03:07.239Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj"
}
],
"source": {
"advisory": "GHSA-3qq3-668m-v9mj",
"discovery": "UNKNOWN"
},
"title": "Gogs: Denial of Service in repository/wiki file listing web pages"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-64719",
"datePublished": "2026-06-24T20:03:07.239Z",
"dateReserved": "2025-11-10T14:07:42.922Z",
"dateUpdated": "2026-06-25T20:05:56.250Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
FKIE_CVE-2025-64719
Vulnerability from fkie_nvd - Published: 2026-06-24 21:16 - Updated: 2026-10-05 16:10
Severity
Summary
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "gogs",
"vendor": "gogs",
"versions": [
{
"status": "affected",
"version": "\u003c 0.14.3"
}
]
}
],
"source": "security-advisories@github.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service. This vulnerability is fixed in 0.14.3."
},
{
"lang": "es",
"value": "Gogs es un servicio Git autoalojado de c\u00f3digo abierto. Anteriormente a la 0.14.3, un usuario malicioso con derechos para crear un nuevo archivo en un repositorio o p\u00e1gina wiki puede desencadenar una condici\u00f3n de denegaci\u00f3n de servicio en la que las p\u00e1ginas que contienen el listado de archivos devolver\u00e1n el error HTTP 500 y har\u00e1n que la interfaz web sea inutilizable para el repositorio o la wiki. El problema est\u00e1 presente en los archivos internal/route/repo/wiki.go e internal/route/repo/view.go, donde las p\u00e1ginas intentan recuperar informaci\u00f3n de commit. Si se devuelven errores mientras se recupera la informaci\u00f3n de commit, la p\u00e1gina devolver\u00e1 un error 500 y dejar\u00e1 de renderizarse, lo que resultar\u00e1 en una denegaci\u00f3n de servicio. Esta vulnerabilidad se ha corregido en la versi\u00f3n 0.14.3."
}
],
"id": "CVE-2025-64719",
"lastModified": "2026-10-05T16:10:00.443",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6,
"source": "security-advisories@github.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-64719",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-25T20:05:48.807800Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-06-24T21:16:52.007",
"references": [
{
"source": "security-advisories@github.com",
"url": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
}
GHSA-3QQ3-668M-V9MJ
Vulnerability from github – Published: 2026-06-22 16:58 – Updated: 2026-07-21 13:16
VLAI
Summary
Gogs has a Denial of Service in repository/wiki file listing web pages
Details
Summary
A malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki.
Details
The issue is present in file internal/route/repo/wiki.go and internal/route/repo/view.go where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service.
In view.go the issue occurs at line 56 while a slightly different issue occurs in wiki.go at line 174 where commits[0] is dereferenced without checking if it contains value.
It is possible to trigger issues in assigning the correct value to variable commits by using a specific string as part of the page title.
The issue is linked to the fact that file names can contain special characters such as *, ?, [, ], etc. that will be interpreted as git's pathspec instead of a simple string. So crafting a name containing an incomplete pathspec sequence will trigger this error.
PoC
As a proof of concept consider the file name "[] and how it affects repository and wiki pages.
In the following images it is shown how pages are created, the error shown in the web page right after creation and the error as logged in the console.
Figure 1: Creation of malicious file in repository
Figure 2: Malicious file in repository causes error 500
Figure 3: Console error caused by malicious file in repository
Figure 4: Creation of malicious file in wiki
Figure 5: Malicious file in wiki causes error 500
Figure 6: Console error caused by malicious file in wiki
Impact
The repository and wiki pages will not render when files named with the payload are present in the repository or in the wiki. This condition will be present as long as the malicious file is present in the repository or wiki. The issue will not cause a DoS condition when using the server via CLI.
Severity
4.9 (Medium)
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 0.14.2"
},
"package": {
"ecosystem": "Go",
"name": "gogs.io/gogs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.14.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2025-64719"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": true,
"github_reviewed_at": "2026-06-22T16:58:31Z",
"nvd_published_at": "2026-06-24T21:16:52Z",
"severity": "MODERATE"
},
"details": "### Summary\nA malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki.\n\n### Details\nThe issue is present in file `internal/route/repo/wiki.go` and `internal/route/repo/view.go` where the pages try to recover commit information. If errors are returned while recovering commit information, the page will return a 500 error and stop rendering, resulting in a denial of service.\nIn `view.go` the issue occurs at [line 56](https://github.com/gogs/gogs/blob/89f0f86c7e1a3be7f48d99e27818a79d17357558/internal/route/repo/view.go#L56) while a slightly different issue occurs in `wiki.go` at [line 174](https://github.com/gogs/gogs/blob/89f0f86c7e1a3be7f48d99e27818a79d17357558/internal/route/repo/wiki.go#L174) where `commits[0]` is dereferenced without checking if it contains value.\nIt is possible to trigger issues in assigning the correct value to variable `commits` by using a specific string as part of the page title. \nThe issue is linked to the fact that file names can contain special characters such as `*`, `?`, `[`, `]`, etc. that will be interpreted as git\u0027s pathspec instead of a simple string. So crafting a name containing an incomplete pathspec sequence will trigger this error.\n\n### PoC\nAs a proof of concept consider the file name `\"[]` and how it affects repository and wiki pages.\nIn the following images it is shown how pages are created, the error shown in the web page right after creation and the error as logged in the console.\n\n\u003cimg width=\"835\" height=\"503\" alt=\"repo_creation\" src=\"https://github.com/user-attachments/assets/cdee9625-33d9-42d3-a5fa-264fba4923ed\" /\u003e\n\n**Figure 1: Creation of malicious file in repository**\n\n\u003cimg width=\"832\" height=\"692\" alt=\"repo_error_web\" src=\"https://github.com/user-attachments/assets/53c57366-8f45-4a0f-a2ac-86f4a08467cc\" /\u003e\n\n**Figure 2: Malicious file in repository causes error 500**\n\n\u003cimg width=\"934\" height=\"56\" alt=\"repo_error_console\" src=\"https://github.com/user-attachments/assets/26427fc3-bead-4e41-a484-e2d53289a2da\" /\u003e\n\n**Figure 3: Console error caused by malicious file in repository**\n\n\u003cimg width=\"835\" height=\"503\" alt=\"wiki_creation\" src=\"https://github.com/user-attachments/assets/7a5c9836-64e3-4824-b6e5-9f9a80e7f18a\" /\u003e\n\n**Figure 4: Creation of malicious file in wiki**\n\n\u003cimg width=\"1001\" height=\"463\" alt=\"wiki_error_web\" src=\"https://github.com/user-attachments/assets/33c5a907-b81c-4157-bd37-33341412172a\" /\u003e\n\n**Figure 5: Malicious file in wiki causes error 500**\n\n\u003cimg width=\"1018\" height=\"537\" alt=\"wiki_error_console\" src=\"https://github.com/user-attachments/assets/9b0ab551-5720-4715-a2ac-f7310534f025\" /\u003e\n\n**Figure 6: Console error caused by malicious file in wiki**\n\n### Impact\nThe repository and wiki pages will not render when files named with the payload are present in the repository or in the wiki.\nThis condition will be present as long as the malicious file is present in the repository or wiki. The issue will not cause a DoS condition when using the server via CLI.",
"id": "GHSA-3qq3-668m-v9mj",
"modified": "2026-07-21T13:16:16Z",
"published": "2026-06-22T16:58:31Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64719"
},
{
"type": "WEB",
"url": "https://github.com/gogs/gogs/pull/8116"
},
{
"type": "WEB",
"url": "https://github.com/gogs/gogs/commit/ae41bab5f28e4880edcef01c91d2cbb8839ec9e4"
},
{
"type": "PACKAGE",
"url": "https://github.com/gogs/gogs"
},
{
"type": "WEB",
"url": "https://github.com/gogs/gogs/releases/tag/v0.14.3"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Gogs has a Denial of Service in repository/wiki file listing web pages"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…