GHSA-cf6v-9j57-v6r6LowCVSS 3.0

code.gitea.io/gitea Open Redirect vulnerability

Published
July 5, 2023
Last Modified
December 29, 2023

🔗 CVE IDs covered (1)

CVE-2023-3515 →

📋 Description

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.

🎯 Affected products1

  • go/code.gitea.io/gitea:< 1.19.4

🔗 References (5)