CVE-2021-45329

Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-02-08

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Gitea (Gitea)

References

• https://blog.gitea.io/2018/09/gitea-1.5.1-is-released/
• https://github.com/go-gitea/gitea/pull/4710