Known vulnerabilities in Gitea - page 5

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 95
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 95 known vulnerabilities: 8 high, 39 medium, 48 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
1.19.3 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
1.19.3 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
1.19.3 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU63998 - Improper input validation
CVE-2022-30781
CWE-20 Medium
Available
No
1.16.7 06.06.2022 SB2022060803
#VU61624 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-1058
CWE-601 Medium
No
No
1.16.5 25.03.2022 SB2022032508
#VU48686 - Server-Side Request Forgery (SSRF)
CVE-2020-28991
CWE-918 Medium
No
No
1.12.6 24.11.2020 SB2020112705
SB2020112706
#VU28186 - Improper Locking
CVE-2020-13246
CWE-667 High
No
No
1.11.6 22.05.2020 SB2020052218
#VU25826 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
1.10.6, 1.11.3 09.03.2020 SB2020030905
#VU25825 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
1.10.6, 1.11.3 09.03.2020 SB2020030905
#VU35725 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1010314
CWE-79 Low
No
No
- 11.07.2019 SB2019071129
#VU35949 - Credentials Management
CVE-2019-11576
CWE-255 High
No
No
1.8.0 28.04.2019 SB2019042803
#VU31112 - Improper input validation
CVE-2019-11228
CWE-20 Medium
No
No
1.7.6 15.04.2019 SB2019041511
#VU31113 - Improper input validation
CVE-2019-11229
CWE-20 High
Available
No
1.7.6 15.04.2019 SB2019041511
#VU31190 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1000803
CWE-200 Medium
No
No
1.5.1 08.10.2018 SB2018100807
#VU36783 - Server-Side Request Forgery (SSRF)
CVE-2018-15192
CWE-918 High
No
No
1.5.0 08.08.2018 SB2018080815


Showing elements 81 - 100 out of 95