Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open Redirect vulnerability on internal links #4332

Closed
1 of 7 tasks
ghost opened this issue Jun 28, 2018 · 1 comment
Closed
1 of 7 tasks

Open Redirect vulnerability on internal links #4332

ghost opened this issue Jun 28, 2018 · 1 comment
Labels
topic/security Something leaks user information or is otherwise vulnerable. Should be fixed! type/bug

Comments

@ghost
Copy link

ghost commented Jun 28, 2018 •
edited by ghost

  • Gitea version (or commit ref): all
  • Git version: not relevant
  • Operating system: not relevant
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist: not relevent

Description

Screenshots
@ghost ghost changed the title Open Redirect vulnerability Open Redirect vulnerability - 2 Jun 28, 2018
@lunny lunny added type/bug topic/security Something leaks user information or is otherwise vulnerable. Should be fixed! labels Jun 28, 2018
@ghost ghost changed the title Open Redirect vulnerability - 2 Open Redirect vulnerability on internal links Jun 28, 2018
@unknwon unknwon mentioned this issue Sep 26, 2018
Closed
@jolheiser
Copy link
Member

Fixed by #10462, #10465

@go-gitea go-gitea locked and limited conversation to collaborators Nov 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
topic/security Something leaks user information or is otherwise vulnerable. Should be fixed! type/bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lunny @jolheiser