CVE-2022-27313 - An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file

HIGH

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file

Published May 3, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.04%

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

Ecosystem	Package	Introduced	Fixed
Go	code.gitea.io/gitea	0	1.16.4

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3917		Advisory
https://github.com/advisories/GHSA-g7p7-x6w7-w6qg		Advisory
https://github.com/go-gitea/gitea/pull/19072		x_refsource_MISCPatchThird Party Advisory
https://github.com/go-gitea/gitea/releases/tag/v1.16.4
https://nvd.nist.gov/vuln/detail/CVE-2022-27313