Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/08/06 3:23 a.m.49 views

CVE-2024-6886 Inproper Sanitation of field leading to stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...

10CVSS0.32968EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2024/08/06 3:23 a.m.19 views

CVE-2024-6886 Inproper Sanitation of field leading to stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...

10CVSS7AI score0.32968EPSS
SaveExploits3References2
CVE
CVE
added 2024/08/06 3:23 a.m.128 views

CVE-2024-6886

Summary: CVE-2024-6886 is a stored XSS vulnerability in Gitea 1.22.0 that allows authenticated attackers to inject JavaScript via repository descriptions, which is stored on the server and executed in other users’ sessions. The Nuclei template, Exploit-DB entry, and OSV entries confirm the issue ...

10CVSS6.5AI score0.32968EPSS
SaveExploits3References2
Rows per page
Query Builder