GHSA-hqx2-j33x-9fc4MediumCVSS 6.1

Gitea XSS Vulnerability in Repository Description

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2019-1010314 →

📋 Description

Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.

🎯 Affected products1

  • go/code.gitea.io/gitea:>= 1.7.2, < 1.7.4

🔗 References (7)