CVE-2021-28378
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations
Low · published March 15, 2021
What it is
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
The record
Technical detail
- CVSS v3.1
- 3.7 · LOW
- Vector
- CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.08762 · 95.2th percentile
- Published
- 2021-03-15T05:20Z
EPSS history
Timeline