Open redirect in Gitea

MEDIUM 6.1CVE-2021-45328 · BIT-gitea-2021-45328 · GHSA-36h2-95gj-w488 · Published 08/02/2022 · updated 17/06/2026

In short

CVE-2021-45328 is a MEDIUM (CVSS 6.1) vulnerability affecting github.com/go-gitea/gitea, gitea (gitea).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.2% of all vulnerabilities.
Fix: update to 1.4.3 or later.

Package	Affected versions	Patched versions
github.com/go-gitea/gitea Go	`< 1.4.3`	`1.4.3`
gitea gitea	`< 1.4.3`	`1.4.3`

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

NVD description

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.4.3

1.4.3

< 1.4.3

1.4.3

More vulnerabilities in github.com/go-gitea/gitea

See all →