CVE-2022-27313: Gitea

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

Affected products

• Gitea Gitea: version 1.16.3 only

Published 2022-05-03. Last modified 2026-06-17.