Lucene search

CVE-2022-1928

🗓️ 29 May 2022 14:08:15Reported by @huntrdevType

cve🔗 web.nvd.nist.gov👁 64 Views🌐 4 Media mentions

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9

Reporter	Title	Published	Views	Family All 15
Veracode	Cross-site Scripting (XSS)	31 May 202201:40	–	veracode
Github Security Blog	Stored Cross-site Scripting in gitea	30 May 202200:00	–	github
GitLab Advisory Database	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	30 May 202200:00	–	gitlab
OSV	Stored Cross-site Scripting in gitea	30 May 202200:00	–	osv
OSV	CVE-2022-1928	29 May 202214:15	–	osv
OSV	Stored Cross-site Scripting in gitea in code.gitea.io/gitea	21 Aug 202415:11	–	osv
OSV	BIT-gitea-2022-1928	6 Mar 202410:53	–	osv
Prion	Cross site scripting	29 May 202214:15	–	prion
Cvelist	CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea	29 May 202200:00	–	cvelist
OpenVAS	Gitea < 1.16.9 XSS Vulnerability	3 Jun 202200:00	–	openvas

Nvd

Node

gitea giteaRange<1.16.9

[
  {
    "vendor": "go-gitea",
    "product": "go-gitea/gitea",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.16.9",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202210-14
huntr	www.huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2
github	www.github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 May 2022 14:15Current

5Medium risk

Vulners AI Score5

CVSS23.5

CVSS35.4

EPSS0.001

CWE-79