PT-2018-3871 · Gitea · Gitea

Ghost · Published 2018-06-28 · Updated 2026-04-22 · CVE-2021-45328

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.4.3

Description The issue is related to an open redirect vulnerability, which allows an attacker to redirect users to an untrusted site via internal URLs. This can be exploited by a remote attacker to redirect users to any arbitrary URL.

Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to internal URLs to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2023-02301

BIT-GITEA-2021-45328

CVE-2021-45328

GHSA-36H2-95GJ-W488

GO-2022-0579

Affected Products

Gitea

References · 16

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45328 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0579 · Vendor Advisory
• https://blog.gitea.io/2018/06/release-of-1.4.3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45328 · Security Note
• https://bdu.fstec.ru/vul/2023-02301 · Security Note
• https://osv.dev/vulnerability/GHSA-36h2-95gj-w488 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45328 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45328 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45328 · Security Note
• https://osv.dev/vulnerability/BIT-gitea-2021-45328 · Vendor Advisory
• https://github.com/go-gitea/gitea · Note
• https://github.com/go-gitea/gitea/issues/4332 · Note
• https://github.com/advisories/GHSA-36h2-95gj-w488 · Note
• https://t.me/cibsecurity/37014 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/2046816302564831237 · Twitter Post