← Back to CVE search

CVE-2026-57894

Gitea

Description

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

CVSS 8.5EPSS 0.267%Risk 0.87
View source
Published
2026-08-13 17:17:25
Affected versions
unknown
Type
Web application
Last modified
2026-08-26 16:53:48
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N