Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.
CVSS Score
4.4
EPSS Score
0.008
Published
2022-05-29
Gitea before 1.16.7 does not escape git fetch remote.
CVSS Score
7.5
EPSS Score
0.879
Published
2022-05-16
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.
CVSS Score
7.2
EPSS Score
0.532
Published
2022-03-24
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.
CVSS Score
5.3
EPSS Score
0.014
Published
2022-03-15
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.
CVSS Score
6.5
EPSS Score
0.008
Published
2022-03-10
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.
CVSS Score
9.8
EPSS Score
0.014
Published
2022-02-09
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
CVSS Score
3.7
EPSS Score
0.088
Published
2021-03-15
Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path.
CVSS Score
7.5
EPSS Score
0.018
Published
2021-02-05
Page 5