Vulnerability advisory
GHSA-36h2-95gj-w488
Open redirect in Gitea
Also known as BIT-gitea-2021-45328CVE-2021-45328GO-2022-0579
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.4.3 | 1.4.3 |
Description
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.