GitHub Advisoryadvisory · Go

GHSA-g7p7-x6w7-w6qg Arbitrary file deletion in gitea

HIGH Published 2022-05-04 Modified 2022-05-24 Official page ↗

Aliases: CVE-2022-27313
Ecosystem: Go
Packages: code.gitea.io/gitea
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed: 2022-05-24

Affected packages

• Go code.gitea.io/gitea: < 1.16.4 → fixed in 1.16.4

Description

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

Related

Alias · CVE (1)

CVE-2022-27313 An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the… vulnerability

References