Lucene search

[ASA-202011-26] gitea: insufficient validation

🗓️ 26 Nov 2020 00:00:00Reported by ArchLinuxType

archlinux🔗 security.archlinux.org👁 129 Views

gitea: insufficient validation, SSRF vulnerability fixed in version 1.12.6-

Reporter	Title	Published	Views	Family All 10
Prion	Path traversal	24 Nov 202001:15	–	prion
OSV	Improper Access Control in Gitea	24 Apr 202420:56	–	osv
OSV	CVE-2020-28991	24 Nov 202001:15	–	osv
OSV	BIT-gitea-2020-28991	6 Mar 202410:55	–	osv
CVE	CVE-2020-28991	24 Nov 202001:15	–	cve
NVD	CVE-2020-28991	24 Nov 202001:15	–	nvd
OpenVAS	Gitea 0.9.99 < 1.12.6 RCE Vulnerability	10 Feb 202100:00	–	openvas
Cvelist	CVE-2020-28991	24 Nov 202000:29	–	cvelist
Veracode	Privilege Escalation	25 Nov 202011:57	–	veracode
Github Security Blog	Improper Access Control in Gitea	24 Apr 202420:56	–	github

Source	Link
security	www.security.archlinux.org/AVG-1299
github	www.github.com/go-gitea/gitea/releases/tag/v1.12.6
github	www.github.com/go-gitea/gitea/commit/480efbdb96e4092493ec1e3683b2ab688ac95096
security	www.security.archlinux.org/CVE-2020-28991

OS	OS Version	Architecture	Package	Package Version	Filename
ArchLinux	any	any	gitea	1.12.6-1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Nov 2020 00:00Current

2.1Low risk

Vulners AI Score2.1

EPSS0.002