CVE-2024-6886

Vulnerability Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.

Related Weaknesses (CWE)

CWE-79

References

https://blog.gitea.com/release-of-1.22.1/
https://github.com/go-gitea/gitea/pull/31200

FAQ

What is CVE-2024-6886?

CVE-2024-6886 is a documented vulnerability. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source G...

How severe is CVE-2024-6886?

CVSS scoring is not yet available for CVE-2024-6886. Check NVD for updates.

Is there a patch for CVE-2024-6886?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.