CVE-2024-6886

Fixed in a distro release EPSS 33%CVSS 10.0

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.

Published 2024-08-06 · CVE record · OSV

Products: Gitea Open Source Git Server, Gitea

Fixed upstream

Ecosystem	Package	Fixed in
Go	code.gitea.io/gitea	1.22.1

Distro releases

Release	Package	Fixed in
Chainguard	gitness	0
Wolfi	gitness	0