~ / search / GHSA-g7p7-x6w7-w6qg

GHSA-g7p7-x6w7-w6qg

Arbitrary file deletion in gitea

Source: GitHub Advisory Database (reviewed) High CVE-2022-27313

Packages

EcosystemPackageAffectedFixed in
Go code.gitea.io/gitea < 1.16.4 1.16.4

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

References

External links from the advisory. They lead to third-party sites.