Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2024-6886

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.

Published: Aug 6, 2024
Updated: Nov 16, 2025
CVE: CVE-2024-6886
GHSA: GHSA-4h4p-553m-46qh
Severity: Critical
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
code.gitea.io/gitea	-	1.22.1

https://blog.gitea.com/release-of-1.22.1
https://blog.gitea.com/release-of-1.22.1/
https://github.com/go-gitea/gitea/commit/b6280f4d21309cfae7cc07f74173354c664d5e10
https://github.com/go-gitea/gitea/pull/31200
https://pkg.go.dev/vuln/GO-2024-3056

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo