| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/go-gitea/gitea | < 1.7.0 | 1.7.0 |
| gitea | < 1.7.0 | 1.7.0 |
Gitea is a project to help users set up a self-hosted Git service. Server Side Request Forgery (SSRF) vulnerability exists in Gitea before 1.7.0 using the OpenID URL. Gitea can leak sensitive information about the local network through the error provided by the UI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free