Описание
Gitea allows attackers to add attachments with forbidden file extensions
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
Пакеты
Наименование
code.gitea.io/gitea
go
Затронутые версииВерсия исправления
< 1.23.0-rc0
1.23.0-rc0
Связанные уязвимости
CVSS3: 5.3
ubuntu
11 месяцев назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVSS3: 8.2
redhat
11 месяцев назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVSS3: 5.3
nvd
11 месяцев назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVSS3: 5.3
debian
11 месяцев назад
Gitea before 1.23.0 allows attackers to add attachments with forbidden ...
