Lucene search

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea

🗓️ 29 May 2022 00:00:00Reported by @huntrdevType

Stored Cross-site Scripting vulnerability in go-gitea/gitea

Reporter	Title	Published	Views	Family All 15
GitLab Advisory Database	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	30 May 202200:00	–	gitlab
Veracode	Cross-site Scripting (XSS)	31 May 202201:40	–	veracode
CVE	CVE-2022-1928	29 May 202214:15	–	cve
Github Security Blog	Stored Cross-site Scripting in gitea	30 May 202200:00	–	github
OSV	Stored Cross-site Scripting in gitea	30 May 202200:00	–	osv
OSV	CVE-2022-1928	29 May 202214:15	–	osv
OSV	Stored Cross-site Scripting in gitea in code.gitea.io/gitea	21 Aug 202415:11	–	osv
OSV	BIT-gitea-2022-1928	6 Mar 202410:53	–	osv
Prion	Cross site scripting	29 May 202214:15	–	prion
OpenVAS	Gitea < 1.16.9 XSS Vulnerability	3 Jun 202200:00	–	openvas

[
  {
    "vendor": "go-gitea",
    "product": "go-gitea/gitea",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.16.9",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202210-14
huntr	www.huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2
github	www.github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 May 2022 00:00Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.001

CWE-79