Lucene search
Veracode Vulnerability DatabaseVERACODE:34827HistoryMar 25, 2022 - 6:18 a.m.
Open Redirect
2022-03-2506:18:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
open redirect
gitea
context vulnerability
malicious urls
software
EPSS
0.001
Percentile
41.5%
github.com/go-gitea/gitea is vulnerable to open redirect. The vulnerability exists in RedirectToFirst function in context.go due to the presence of backslashes in the Locations which allows an attacker to parse malicious URLs to redirect the user.
References
Related
prion
prion
Open redirect
2022-03-24 15:15:00
osv
osv
Gitea Open Redirect
2022-03-25 00:00:33
BIT-gitea-2022-1058
2024-03-06 10:53:31
CVE-2022-1058
2022-03-24 15:15:08
github
github
Gitea Open Redirect
2022-03-25 00:00:33
nvd
nvd
CVE-2022-1058
2022-03-24 15:15:08
nuclei
nuclei
Gitea <1.16.5 - Open Redirect
2023-03-31 11:28:24
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
2023-07-04 12:51:35
cve
cve
CVE-2022-1058
2022-03-24 15:15:08
freebsd
freebsd
gitea -- Open Redirect on login
2022-03-23 00:00:00
openvas
openvas
Gitea < 1.16.5 Open Redirect Vulnerability
2022-03-29 00:00:00
cvelist
cvelist
CVE-2022-1058 Open Redirect on login in go-gitea/gitea
2022-03-24 14:15:12
nessus
nessus
huntr
huntr
Open Redirect on login
2022-03-23 11:11:11
Open Redirect on follow/unfollow user's profile action
2023-06-07 07:33:02