CVE-2021-3382

HIGH7.0EPSS 0.91%

Buffer Overflow in gitea

發布日:2024/4/24修改日:2024/6/4

也稱為:GHSA-9f8c-pfvv-p4gmBIT-gitea-2021-3382GO-2024-2757

描述

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path.

受影響套件(3)

Bitnami/gitea>= 1.9.0, < 1.13.2
Go/code.gitea.io/gitea>= 1.9.0, < 1.13.2
Go/github.com/go-gitea/gitea>= 1.9.0, < 1.13.2

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.0	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

參考連結(4)

ADVISORYhttps://github.com/advisories/GHSA-9f8c-pfvv-p4gm
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-3382
PATCHhttps://github.com/go-gitea/gitea
WEBhttps://github.com/go-gitea/gitea/pull/14390