github.com
https://github.com/go-gitea/gitea CVE-2022-1928
MEDIUM
Cross-site Scripting (XSS) - Stored in go-gitea/gitea
Record summary
CVE-2022-1928 has a selected CVSS score of 5.4 (medium).
Description
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
go-gitea/giteaBrowse go-gitea / go-gitea/gitea | CVE List | Before 1.16.9 | affected |
code.gitea.io/giteaBrowse Go / code.gitea.io/gitea | GitHub Advisory | Before 1.16.9 · Fixed in 1.16.9 | affected |
References
6github.com
https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c github.com
https://github.com/go-gitea/gitea/pull/19825 huntr.dev
https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-1928 GLSA-202210-14Vendor advisory
https://security.gentoo.org/glsa/202210-14