GHSA-r3gq-wxqf-q4gh

ghsaUSosv

Cross-site Scripting in Gitea

view advisory published 2022-02-10Licence: CC-BY-4.0

Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-45329US	medium6.1	0.78% (56th)	—	2022-02-08
Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.