Cross-Site Scripting (XSS)

🗓️ 17 Oct 2022 12:26:54Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

github.com/go-gitea/gitea XSS vulnerability in command.g

Reporter	Title	Published	Views	Family All 20
AlpineLinux	CVE-2022-42968	16 Oct 202200:00	–	alpinelinux
Circl	CVE-2022-42968	16 Oct 202207:30	–	circl
CNNVD	Gitea 参数注入漏洞	16 Oct 202200:00	–	cnnvd
CVE	CVE-2022-42968	16 Oct 202200:00	–	cve
Cvelist	CVE-2022-42968	16 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-7173	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202210-14 : Gitea: Multiple Vulnerabilities	31 Oct 202200:00	–	nessus
Github Security Blog	Gitea vulnerable to Argument Injection	16 Oct 202212:00	–	github
Gentoo Linux	Gitea: Multiple Vulnerabilities	31 Oct 202200:00	–	gentoo
NVD	CVE-2022-42968	16 Oct 202204:15	–	nvd

Vulners

Node

gitea giteaMatch1.15.10-r1go

AND

gitea giteaMatch1.15.2-r2go

AND

gitea giteaMatch1.17.0-r0go

AND

gitea giteaMatch1.11.5-r0go

AND

gitea giteaMatch1.14.4-r0go

AND

gitea giteaMatch1.11.6-r0go

AND

gitea giteaMatch1.16.7-r1go

AND

gitea giteaMatch1.17.0-r1go

AND

gitea giteaMatch1.15.3-r1go

AND

gitea giteaMatch1.16.8-r0go

AND

gitea giteaMatch1.11.4-r1go

AND

gitea giteaMatch1.16.3-r0go

AND

gitea giteaMatch1.14.6-r0go

AND

gitea giteaMatch1.14.3-r0go

AND

gitea giteaMatch1.14.2-r1go

AND

gitea giteaMatch1.16.9-r0go

AND

gitea giteaMatch1.17.2-r0go

AND

gitea giteaMatch1.13.3-r0go

AND

gitea giteaMatch1.15.8-r0go

AND

gitea giteaMatch1.13.4-r0go

AND

gitea giteaMatch1.15.2-r0go

AND

gitea giteaMatch1.15.9-r0go

AND

gitea giteaMatch1.16.4-r0go

AND

gitea giteaMatch1.15.7-r0go

AND

gitea giteaMatch1.16.9-r1go

AND

gitea giteaMatch1.17.2-r1go

AND

gitea giteaMatch1.13.7-r0go

AND

gitea giteaMatch1.16.2-r0go

AND

gitea giteaMatch1.15.2-r3go

AND

gitea giteaMatch1.14.0-r0go

AND

gitea giteaMatch1.16.4-r1go

AND

gitea giteaMatch1.13.6-r0go

AND

gitea giteaMatch1.16.8-r1go

AND

gitea giteaMatch1.16.1-r0go

AND

gitea giteaMatch1.15.11-r0go

AND

gitea giteaMatch1.11.2-r1go

AND

gitea giteaMatch1.11.3-r0go

AND

gitea giteaMatch1.14.2-r0go

AND

gitea giteaMatch1.15.10-r0go

AND

gitea giteaMatch1.14.5-r0go

AND

gitea giteaMatch1.11.1-r0go

AND

gitea giteaMatch1.11.4-r2go

AND

gitea giteaMatch1.15.3-r0go

AND

gitea giteaMatch1.16.5-r0go

AND

gitea giteaMatch1.16.7-r0go

AND

gitea giteaMatch1.17.2-r2go

AND

gitea giteaMatch1.17.1-r0go

AND

gitea giteaMatch1.16.6-r0go

AND

gitea giteaMatch1.14.1-r0go

AND

alpinelinux alpine_linuxMatchedge

go-gitea github.com/go-gitea/giteaRangev1.9.0-rc2–1.9.0-rc2go

go-gitea github.com/go-gitea/giteaRangev1.18.0-dev–1.18.0-devgo

Source	Link
github	www.github.com/go-gitea/gitea/commit/cd48a007bb85ba071ed175a6376b9e392e2c49b6
github	www.github.com/go-gitea/gitea/commit/d98c5db58fdeded983bf5c0fe781fd7b77a1235f
github	www.github.com/advisories/GHSA-w8xw-7crf-h23x
security	www.security.gentoo.org/glsa/202210-14
github	www.github.com/go-gitea/gitea/pull/21463
github	www.github.com/go-gitea/gitea/releases/tag/v1.17.3
github	www.github.com/go-gitea/gitea/commit/677af6ac57295a9e8795a8ab3f29e284f2247fb6

27 Apr 2023 15:01Current

9High risk

Vulners AI Score9

CVSS 3.19.8

EPSS0.00955