Описание
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitea | removed | package |
EPSS
Процентиль: 9%
0.00032
Низкий
Связанные уязвимости
CVSS3: 8.2
ubuntu
около 1 месяца назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVSS3: 8.2
nvd
около 1 месяца назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVSS3: 8.2
github
около 1 месяца назад
Gitea allows attackers to add attachments with forbidden file extensions
EPSS
Процентиль: 9%
0.00032
Низкий