GHSA-cf6v-9j57-v6r6
code.gitea.io/gitea Open Redirect vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | code.gitea.io/gitea | < 1.19.4 | 1.19.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft.
References
External links from the advisory. They lead to third-party sites.