{"id":"CVE-2021-45328","details":"Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.","aliases":["BIT-gitea-2021-45328","GHSA-36h2-95gj-w488","GO-2022-0579"],"modified":"2026-08-07T17:03:14.832154Z","published":"2022-02-08T16:15:07.413Z","references":[{"type":"ADVISORY","url":"https://blog.gitea.io/2018/06/release-of-1.4.3/"},{"type":"REPORT","url":"https://github.com/go-gitea/gitea/issues/4332"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/go-gitea/gitea","events":[{"introduced":"0"},{"fixed":"96c63a49376cd71c29a92e9a1685f07653376668"}],"database_specific":{"cpe":"cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.4.3"}],"source":"CPE_RANGE"}}],"versions":["v1.4.2","v1.4.1","v1.4.0","v1.4.0-rc3","v1.4.0-rc2","v1.4.0-rc1","v1.1.0","v1.0.0","v0.9.99"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45328.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/gitea-plugin","events":[{"introduced":"0"},{"fixed":"8288e82a157e9e3080788fd92e06023f022cac51"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.4.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*"}}],"versions":["1.4.2","1.4.1","1.4.0--rc182.9eb947470fcf","gitea-1.3.0","gitea-1.2.1","gitea-1.2.0","gitea-1.1.2","gitea-1.1.1","gitea-1.1.0","gitea-1.0.8","gitea-1.0.7","gitea-1.0.6","gitea-1.0.5","gitea-1.0.4","gitea-1.0.3","gitea-1.0.2","gitea-1.0.1","gitea-1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45328.json","vanir_signatures_modified":"2026-08-07T17:03:14Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"266004834748904800046261870251710986605","length":1590},"id":"CVE-2021-45328-55adc3b7","signature_type":"Function","signature_version":"v1","source":"https://github.com/jenkinsci/gitea-plugin/commit/8288e82a157e9e3080788fd92e06023f022cac51","target":{"file":"src/main/java/org/jenkinsci/plugin/gitea/GiteaSCMBuilder.java","function":"checkoutUriTemplate"}},{"target":{"file":"src/main/java/org/jenkinsci/plugin/gitea/GiteaSCMBuilder.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["98450502315083623480527011456022893768","329176110356089968377782171926677183305","130416140511573562415101847425282896439","245065226014255470495692052047173648548","14892499485354592639347529893470868689","154332586271384460545820730403858493314","196695406182218540758730850413267679277","249030414729594135643648763441564174601","85574347713603382808140755503059208421","48118297772435877604860147644500902040","331720843367794508373319238884739634231","187375135658614148498287285781997943139"]},"id":"CVE-2021-45328-adfad481","signature_type":"Line","signature_version":"v1","source":"https://github.com/jenkinsci/gitea-plugin/commit/8288e82a157e9e3080788fd92e06023f022cac51"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}