CVE-2022-1928 - Cross-site Scripting (XSS) - Stored in go-gitea/gitea

MEDIUM

Cross-site Scripting (XSS) - Stored in go-gitea/gitea

Published May 29, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.79%

Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<1.16.9

Ecosystem	Package	Introduced	Fixed
Go	code.gitea.io/gitea	0	1.16.9

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4768		Advisory
https://github.com/advisories/GHSA-ph3w-2843-72mx		Advisory
https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c		PatchThird Party Advisory
https://github.com/go-gitea/gitea/pull/19825
https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2		ExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1928
https://security.gentoo.org/glsa/202210-14		vendor-advisoryThird Party Advisory