CGA-9469-468m-w5f4

Published

Last updated

https://images.chainguard.dev/security/CGA-9469-468m-w5f4

Package

gitness

Latest Update

Not affected

Aliases

CVE-2023-3515
GHSA-cf6v-9j57-v6r6

Severity

3.0

Low

CVSS V3

Summary

code.gitea.io/gitea Open Redirect vulnerability

Description

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-3515
https://github.com/advisories/GHSA-cf6v-9j57-v6r6
https://github.com/go-gitea/gitea/commit/9aaaf980f0ba15611f30568bd67bce3ec12954e2
https://github.com/go-gitea/gitea
https://huntr.dev/bounties/e335cd18-bc4d-4585-adb7-426c817ed053
https://security.gentoo.org/glsa/202312-13

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-9469-468m-w5f4

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources