CVE-2022-27313

Description

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

Affected packages (3)

• Bitnami/gitea>= 1.16.3, < 1.16.4
• Go/code.gitea.io/giteafrom 0, < 1.16.4
• Go/code.gitea.io/giteafrom 0, < 1.16.4

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-g7p7-x6w7-w6qg
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-27313
• PATCHhttps://github.com/go-gitea/gitea
• WEBhttps://github.com/go-gitea/gitea/pull/19072
• WEBhttps://github.com/go-gitea/gitea/releases/tag/v1.16.4