Go-Gitea Gitea vulnerabilities

4 known vulnerabilities affecting go-gitea/go-gitea_gitea.

Total CVEs

4

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2023-3515MEDIUMCVSS 4.4≥ unspecified, < 1.19.42023-07-05

CVE-2023-3515 [MEDIUM] CWE-601 CVE-2023-3515: Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.

CVE-2022-1928MEDIUMCVSS 5.4≥ unspecified, < 1.16.92022-05-29

CVE-2022-1928 [MEDIUM] CWE-79 CVE-2022-1928: Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.

CVE-2022-1058MEDIUMCVSS 6.1PoC≥ unspecified, < 1.16.52022-03-24

CVE-2022-1058 [MEDIUM] CWE-601 CVE-2022-1058: Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

CVE-2022-0905HIGHCVSS 7.1≥ unspecified, < 1.16.42022-03-10

CVE-2022-0905 [HIGH] CWE-862 CVE-2022-0905: Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4. Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.