GoogleOSV:GHSA-CF6V-9J57-V6R6code.gitea.io/gitea Open Redirect vulnerability
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.1%
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.
| CPE | Name | Operator | Version |
|---|---|---|---|
| code.gitea.io/gitea | lt | 1.19.4 |
Related
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.1%