CVE-2024-6886 — Inproper Sanitation of field leading to stored XSS

CVE-2024-6886

Inproper Sanitation of field leading to stored XSS PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.

Affected (CNA)

Vendor / product	Versions
Gitea / Gitea Open Source Git Server	affected 1.22.0

CWE

CWE-79

References

https://github.com/go-gitea/gitea/pull/31200
https://blog.gitea.com/release-of-1.22.1/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.