← Back to CVE List

CVE-2018-18926

Published: 2018-11-04T05:29Z
Last Modified: 2024-11-21T03:56Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt