CVE-2021-45329: XSS
Published Feb 8, 2022
·Updated
Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.
Affected Software
1 affected component
Gitea Gitea<1.5.1
Remediation
Patch Available
Event History
Feb 8, 2022
CVE Published
via MITRE·10:26 PM
Data Sourced
via MITRE·10:26 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2021-45329.
2
What is the severity level of CVE-2021-45329?
The severity level of CVE-2021-45329 is medium.
3
How does the Cross Site Scripting (XSS) vulnerability in Gitea before 1.5.1 occur?
The Cross Site Scripting (XSS) vulnerability in Gitea before 1.5.1 occurs via the repository settings inside the external wiki/issue tracker URL field.
4
Which software versions are affected by CVE-2021-45329?
The Gitea software versions up to, but exclusive of, 1.5.1 are affected by CVE-2021-45329.
5
Are there any references or additional information available for CVE-2021-45329?
Yes, you can find more information about CVE-2021-45329 in the following references: [1] https://blog.gitea.io/2018/09/gitea-1.5.1-is-released/ [2] https://github.com/go-gitea/gitea/pull/4710