Detections
Analytics
FreeBSD : gitea -- privilege escalation, XSS (29d34524-0542-11e9-a444-080027fee39c)
high Nessus Plugin ID 119879
Language:
Synopsis
The remote FreeBSD host is missing a security-related update.Description
The Gitea project reports :Security
- Sanitize uploaded file names
- HTMLEncode user added text
Solution
Update the affected package.See Also
https://github.com/go-gitea/gitea/issues/5569
Plugin Details
Severity: High
ID: 119879
File Name: freebsd_pkg_29d34524054211e9a444080027fee39c.nasl
Version: 1.1
Type: local
Family: FreeBSD Local Security Checks
Published: 12/27/2018
Updated: 12/27/2018
Supported Sensors: Nessus
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:gitea, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 12/21/2018
Vulnerability Publication Date: 12/19/2018