CVE-2021-45325

Description

Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.

Affected Platforms

Weakness Type

CWE-918

References

• https://blog.gitea.io/2019/01/gitea-1.7.0-is-released/
• https://github.com/go-gitea/gitea/pull/5705
• https://blog.gitea.io/2019/01/gitea-1.7.0-is-released/
• https://github.com/go-gitea/gitea/pull/5705