En resumen
- CVE-2018-18926 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a code.gitea.io/gitea, gitea (gitea).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.5% de las vulnerabilidades.
- Solución: actualizar a 1.5.2, 1.5.4 o posterior.
Description
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
NVD description
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
Más vulnerabilidades de code.gitea.io/gitea
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free