CVE-2022-1058CWE-601

Open Redirect on login in go-gitea/gitea

High · published March 24, 2022

Patch now

High probability of exploitation

CVSS calls it high at 7.2. It sits in the 99.0th percentile for exploit probability.

CVSS v3.0
7.2
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.53177 · 99.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-03-24T14:15Z
EPSS history
Timeline
  • 24 MAR 14:15Z
    Open Redirect on login in go-gitea/gitea
    cvelistv5