Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22314
HistoryMar 16, 2022 - 12:00 a.m.

Gitea Directory Traversal Vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
gitea
directory traversal
vulnerability
avatar middleware
exploitation
crafted urls
cnvd

EPSS

0.001

Percentile

30.5%

Gitea is an open source community-driven clone of Gogs, a popular Git self-hosting service. a directory traversal vulnerability exists on Gitea that could be exploited to allow an attacker to make the avatar middleware in Gitea allow directory traversal via crafted URLs.

EPSS

0.001

Percentile

30.5%