CVE-2021-45328

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.4.3

Description The issue is related to an open redirect vulnerability, which allows an attacker to redirect users to an untrusted site via internal URLs. This can be exploited by a remote attacker to redirect users to any arbitrary URL.

Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to internal URLs to minimize the risk of exploitation.