CVE-2019-1010261

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS)

published July 18, 2019

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00840 · 57.4th percentile
Published
2019-07-18T16:30Z
EPSS history
Timeline
  • 18 JUL 16:30Z
    Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS)
    cvelistv5