Known vulnerabilities in Gitea - page 7
Vendor:
The Gitea Authors
Software:
Gitea
Software CPE:
cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Website:
https://gitea.io/en-us/
Total vulnerabilities:
128
Public exploits:
12
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.27.3
1.27.2
1.27.1
1.27.0
1.26.4
1.26.3
1.26.2
1.26.1
1.26.0
1.25.5
1.25.4
1.25.3
1.25.2
1.25.1
1.25.0
1.24.7
1.24.6
1.24.5
1.24.4
1.24.3
1.24.2
1.24.1
1.24.0
1.23.8
1.23.7
1.23.6
1.23.5
1.23.4
1.23.3
1.23.2
1.23.1
1.23.0
1.22.6
1.22.5
1.22.4
1.22.3
1.22.2
1.22.1
1.22.0
1.21.11
1.21.10
1.21.9
1.21.8
1.21.7
1.21.6
1.21.5
1.21.4
1.21.3
1.21.2
1.20.6
1.21.1
1.21.0
1.20.5
1.20.4
1.20.3
1.20.2
1.20.1
1.20.0
1.19.4
1.19.3
1.19.2
1.19.1
1.19.0
1.18.5
1.18.4
1.18.3
1.18.2
1.18.1
1.18.0
1.17.4
1.17.3
1.17.2
1.17.1
1.17.0
1.16.9
1.16.8
1.16.6
1.16.7
1.16.5
1.16.4
1.16.3
1.16.2
1.16.1
1.16.0
1.15.11
1.15.10
1.15.9
1.15.8
1.15.7
1.15.6
1.15.5
1.15.4
1.15.3
1.15.2
1.15.1
1.14.7
1.15.0
1.14.6
1.14.5
1.14.4
1.14.3
1.14.2
1.14.1
1.14.0
1.13.7
1.13.5
1.13.6
1.13.4
1.13.3
1.13.2
1.13.1
1.13.0
1.12.6
1.12.5
1.12.4
1.12.3
1.12.2
1.12.1
1.11.8
1.11.7
1.12.0
1.11.6
1.11.5
1.11.4
1.10.6
1.11.3
1.11.2
1.11.1
1.11.0
1.10.5
1.10.4
1.10.3
1.10.2
1.10.1
1.10.0
1.9.6
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.8.3
1.8.2
1.8.1
1.8.0
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.3
1.5.2
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.4.0
1.3.3
1.3.2
1.3.1
1.3.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
0.9.99
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU25826 - URL Redirection to Untrusted Site ('Open Redirect') |
CWE-601 | Medium | 1.10.6, 1.11.3 | 09.03.2020 |
SB2020030905 |
||
| #VU25825 - Cross-Site Request Forgery (CSRF) |
CWE-352 | Low | 1.10.6, 1.11.3 | 09.03.2020 |
SB2020030905 |
||
| #VU35725 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-1010314 |
CWE-79 | Low | - | 11.07.2019 |
SB2019071129 |
||
| #VU35949 - Credentials Management CVE-2019-11576 |
CWE-255 | High | 1.8.0 | 28.04.2019 |
SB2019042803 |
||
| #VU31112 - Improper input validation CVE-2019-11228 |
CWE-20 | Medium | 1.7.6 | 15.04.2019 |
SB2019041511 |
||
| #VU31113 - Improper input validation CVE-2019-11229 |
CWE-20 | High | 1.7.6 | 15.04.2019 |
SB2019041511 |
||
| #VU31190 - Exposure of sensitive information to an unauthorized actor CVE-2018-1000803 |
CWE-200 | Medium | 1.5.1 | 08.10.2018 |
SB2018100807 |
||
| #VU36783 - Server-Side Request Forgery (SSRF) CVE-2018-15192 |
CWE-918 | High | 1.5.0 | 08.08.2018 |
SB2018080815 |
Showing elements 121 - 140 out of 128