ALT-PU-2023-8535

Низкий

ALT-PU-2023-8535: package gitea update to version 1.20.2-alt1

Источник

errata.altlinux.org

Дата публикации

10.08.2023

Дата обновления

10.08.2023

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades gitea to version 1.20.2-alt1.

Устраненные уязвимости1

CVE-2025-68946

Средний 5.4

Дата публикации: 26.12.2025

CWE-79

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS. * GHSA-hq57-c72x-4774: Gitea vulnerable to Cross-site Scripting

CVSS 3.1

Средний 5.4

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

Ссылки

CVE-2025-68946 https://nvd.nist.gov/vuln/detail/CVE-2025-68946

Ссылки2

ALT-PU-2023-8535 https://errata.altlinux.org/ALT-PU-2023-8535

GHSA-hq57-c72x-4774

https://github.com/advisories/GHSA-hq57-c72x-4774

Связанные уязвимости

CVE-2025-68946

CVSS3: 5.4

ubuntu

11 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

CVE-2025-68946

CVSS3: 5.4

redhat

11 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

CVE-2025-68946

CVSS3: 5.4

nvd

11 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

CVE-2025-68946

CVSS3: 5.4

debian

11 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can ...

GHSA-hq57-c72x-4774

CVSS3: 5.4

github

11 месяцев назад

Gitea vulnerable to Cross-site Scripting