GitHub Advisoryadvisory · Go

GHSA-cf6v-9j57-v6r6 code.gitea.io/gitea Open Redirect vulnerability

LOW Published 2023-07-05 Modified 2023-07-06 Official page ↗
Aliases
CVE-2023-3515
Ecosystem
Go
Packages
code.gitea.io/gitea
Severity
Low
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Weaknesses
CWE-601
Reviewed
2023-07-06

Affected packages

• Go code.gitea.io/gitea: < 1.19.4 → fixed in 1.19.4

Description

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.

Related

Alias · CVE (1)

  • CVE-2023-3515 Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References