Open dev-mend-for-github-com[bot] opened 2 years ago
Git with a cup of tea, painless self-hosted git service
Dependency Hierarchy: - :x: **github.com/go-gitea/gitea-v1.2.3** (Vulnerable Library)
Found in HEAD commit: 69a84c862836bec3e4be9a461b9e320cda5aeb94
Found in base branch: master
macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.
Publish Date: 2020-05-05
URL: CVE-2020-12666
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Changed - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: Low - Availability Impact: None
Type: Upgrade version
Origin: https://github.com/advisories/GHSA-733f-44f3-3frw
Release Date: 2020-05-05
Fix Resolution: 1.3.7
CVE-2020-12666 - Medium Severity Vulnerability
Git with a cup of tea, painless self-hosted git service
Dependency Hierarchy: - :x: **github.com/go-gitea/gitea-v1.2.3** (Vulnerable Library)
Found in HEAD commit: 69a84c862836bec3e4be9a461b9e320cda5aeb94
Found in base branch: master
macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.
Publish Date: 2020-05-05
URL: CVE-2020-12666
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Changed - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: Low - Availability Impact: None
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://github.com/advisories/GHSA-733f-44f3-3frw
Release Date: 2020-05-05
Fix Resolution: 1.3.7