Open Redirect in go-gitea/gitea
CVE-2023-3515

4.4MEDIUM

Key Information:

Vendor

Go-gitea

Status
Go-gitea/gitea
Vendor
CVE Published:
5 July 2023

What is CVE-2023-3515?

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.

Affected Version(s)

go-gitea/gitea < 1.19.4

References

https://huntr.dev/bounties/e335cd18-bc4d-4585-adb7-426c81...
https://github.com/go-gitea/gitea/commit/9aaaf980f0ba1561...
https://security.gentoo.org/glsa/202312-13

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-3515 : Open Redirect in go-gitea/gitea