Lucene search

Cross-site Scripting (XSS)

🗓️ 31 May 2022 01:53:40Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

github.com/go-gitea/gitea is vulnerable to cross-site scripting due to SVG image MIME type handling

Reporter	Title	Published	Views	Family All 15
CVE	CVE-2022-1928	29 May 202214:15	–	cve
Github Security Blog	Stored Cross-site Scripting in gitea	30 May 202200:00	–	github
GitLab Advisory Database	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	30 May 202200:00	–	gitlab
OSV	Stored Cross-site Scripting in gitea	30 May 202200:00	–	osv
OSV	Stored Cross-site Scripting in gitea in code.gitea.io/gitea	21 Aug 202415:11	–	osv
OSV	CVE-2022-1928	29 May 202214:15	–	osv
OSV	BIT-gitea-2022-1928	6 Mar 202410:53	–	osv
Prion	Cross site scripting	29 May 202214:15	–	prion
OpenVAS	Gitea < 1.16.9 XSS Vulnerability	3 Jun 202200:00	–	openvas
NVD	CVE-2022-1928	29 May 202214:15	–	nvd

Vulners

Node

gitea github.com\/go-gitea\/giteaRange≤v1.17.0-dev

Source	Link
github	www.github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c
github	www.github.com/go-gitea/gitea/pull/19825
huntr	www.huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2
security	www.security.gentoo.org/glsa/202210-14

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 May 2022 01:40Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.001