Vulnerability advisory
CVE-2024-6886
Inproper Sanitation of field leading to stored XSS
Also known as GHSA-4h4p-553m-46qhGO-2024-3056
Severity
- CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/go-gitea/gitea ↗ | |
| d7f73a1334ab7a97d4e055b7c58cdd9ac303f77a through d7f73a1334ab7a97d4e055b7c58cdd9ac303f77a | No fix listed |
Also listed as affected (2)
| |
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.