| Package | Affected versions | Patched versions |
|---|---|---|
| code.gitea.io/gitea | < 1.19.4 | 1.19.4 |
| gitea | < 1.19.4 | 1.19.4 |
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free