Vulnerability advisory
GHSA-cf6v-9j57-v6r6
code.gitea.io/gitea Open Redirect vulnerability
Also known as BIT-gitea-2023-3515CVE-2023-3515GO-2023-1894
Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.19.4 | 1.19.4 |
Description
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.