tocsin

Alpine/gitea: high 8.8

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

Action: Upgrade gitea to 1.5.2-r0 or later.

Affected

introducedfixedlast affected
01.5.2-r0-

Fixed versions

1.5.2-r0

Sources

published · modified · JSON