.. / CVE-2022-1058

Exploit for Gitea <1.16.5 - Open Redirect (CVE-2022-1058)

Description:

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2022-1058.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1058.yaml
Copy

References:

https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48
https://huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0d
https://nvd.nist.gov/vuln/detail/CVE-2022-1058