Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-18926
7.5
HIGHCVSS v2
Published
November 4, 2018
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
go-gitea/gitea
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD< 1.5.4NVD
Docker Hub
Chocolatey