← All advisories

Low severity3.7NVD Advisory· Published Mar 15, 2021· Updated Jun 17, 2026

CVE-2021-28378

CVE-2021-28378

Description

Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
code.gitea.io/giteaGo	< 1.13.4	1.13.4

Affected products

4

Gitea/Giteadescription
ghsa-coords2 versions
pkg:golang/code.gitea.io/gitea pkg:bitnami/gitea
< 1.13.4+ 1 more
- (no CPE)range: < 1.13.4
- (no CPE)range: >= 1.12.0, < 1.12.7
Go Gitea/Gitea
cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*
Range: >=1.12.0,<=1.12.6

Patches

Vulnerability mechanics

References

6

github.com/go-gitea/gitea/pull/14898nvdPatchThird Party AdvisoryWEB
blog.gitea.io/2021/03/gitea-1.13.4-is-released/nvdRelease NotesVendor Advisory
github.com/advisories/GHSA-g95p-88p4-76cmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-28378ghsaADVISORY
blog.gitea.io/2021/03/gitea-1.13.4-is-releasedghsaWEB
github.com/go-gitea/gitea/pull/14899ghsaWEB

News mentions

0

No linked articles in our index yet.