go-gitea/gitea · Security
code.gitea.io/gitea Open Redirect vulnerability
- GHSA ID
- GHSA-cf6v-9j57-v6r6
- CVE ID
- CVE-2023-3515
- Severity
- low
- Published
- Updated
- CVSS
- 3 · CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
- CVSS v3
- 3 · CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Description
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.
CWEs
- CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')