MEDIUM 4.4 Go
Stored Cross-site Scripting in gitea
GHSA-ph3w-2843-72mx · BIT-gitea-2022-1928 · CVE-2022-1928 · GO-2022-0612
Published · Modified
Description
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-1928
- WEB https://github.com/go-gitea/gitea/pull/19825
- WEB https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c
- WEB https://github.com/go-gitea/gitea
- WEB https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2
- WEB https://security.gentoo.org/glsa/202210-14
Ready to move
Start Securing
Free, no credit card | First findings in minutes