Vulnerability advisory
GHSA-ph3w-2843-72mx
Stored Cross-site Scripting in gitea
Also known as BIT-gitea-2022-1928CVE-2022-1928GO-2022-0612
Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.16.9 | 1.16.9 |
Description
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs