4 matches found
CVE-2026-58441
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
6.3CVSS0.0015EPSS
SaveExploits0References3
CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
5.6AI score0.0015EPSS
SaveExploits0References3
CVE-2026-58441
CVE-2026-58441 describes SSRF in Gitea's restore-repo flow when parsing pull_request.yml. The issue arises because Head.CloneURL is not validated due to CheckAndEnsureSafePR being called with an empty commonCloneBaseURL, letting an attacker-controlled URL survive and be used to add a git remote a...
5.7AI score0.0015EPSS
SaveExploits0References3
20