CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

• CWE-601
• CWE-601

• https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48Patch, Third Party Advisory
• https://huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0dExploit, Patch, Third Party Advisory
• https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48Patch, Third Party Advisory
• https://huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0dExploit, Patch, Third Party Advisory

Published

Mar 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1052Heap Buffer Overflow in iterate_chained_fixups in GitHub rep…5.5
• CVE-2022-1053Keylime does not enforce that the agent registrar data is th…9.1
• CVE-2022-1054The RSVP and Event Management Plugin WordPress plugin before…5.3
• CVE-2022-1055A use-after-free exists in the Linux Kernel in tc_new_tfilte…7.8
• CVE-2022-1056Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows…5.5
• CVE-2022-1057The Pricing Deals for WooCommerce WordPress plugin through 2…9.8
• CVE-2022-1059Aethon TUG Home Base Server versions prior to version 24 are…6.1
• CVE-2022-1061Heap Buffer Overflow in parseDragons in GitHub repository ra…7.5
• CVE-2022-1062The th23 Social WordPress plugin through 1.2.0 does not sani…4.8
• CVE-2022-1063The Thank Me Later WordPress plugin through 3.3.4 does not s…4.8
• CVE-2022-1064SQL injection through marking blog comments on bulk as spam …8.8
• CVE-2022-1065A vulnerability within the authentication process of Abacus …8.8