En resumen
- CVE-2019-1010314 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a code.gitea.io/gitea, gitea (gitea).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.85%, mayor que el 58.1% de las vulnerabilidades.
- Solución: actualizar a 1.7.4 o posterior.
Description
Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.
NVD description
Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.
Más vulnerabilidades de code.gitea.io/gitea
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free