CVE-2021-28378 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Cross-site scripting |
| Description | Gitea 1.12.x and 1.13.x before 1.13.4 allows cross-site scripting (XSS) via certain issue data in some situations. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1689 | gitea | 1.13.2-1 | 1.13.4-1 | High | Fixed |
| References |
|---|
https://github.com/go-gitea/gitea/pull/14898 https://github.com/go-gitea/gitea/commit/7d3e174906a24552f32ea5215910bab9cebeafa4 |