CVE-2019-1010314

Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS)

published July 11, 2019

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Published
2019-07-11T19:33Z
EPSS history
Timeline
  • 11 JUL 19:33Z
    Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS)
    cvelistv5