CVE-2025-50978

Gitblit v1.7.1 is affected by a reflected XSS in repository path handling caused by insufficient input sanitization of filename elements. An attacker can inject a crafted path payload to execute arbitrary JavaScript when a victim views the manipulated URL. The available connected sources confirm ...