XSS in Gitea Open Source Git Server
CVE-2024-6886
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.330 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Gitea Open Source Git Server — versions 1.22.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-6886?
- CVE-2024-6886 is a vulnerability in Gitea Open Source Git Server, classified under Cross-site Scripting. Published 2024-08-06.
- Is CVE-2024-6886 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.