CVE-2018-1000803

Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses

published October 8, 2018

CVSS
—
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email set as private. This vulnerability appears to have been fixed in 1.5.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01293 · 70.1th percentile
Published
2018-10-08T15:00Z
EPSS history
Timeline
  • 08 OCT 15:00Z
    Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses
    cvelistv5