GHSA-cf6v-9j57-v6r6

ghsaUSosv

code.gitea.io/gitea Open Redirect vulnerability

view advisory published 2023-07-05Licence: CC-BY-4.0

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-3515USmedium4.4—
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan