168 matches found
CVE-2025-68937
CVE-2025-68937 - Gitea/Forgejo 템플릿 심볼릭 링크 RCE CVE-2025-68937 에 대한 자동화된 개념 증명PoC: Gitea 및 Forgejo 템플릿 저장소 처리 과정에서 심볼릭 링크 역참조를 통한 디렉터리 트래버설로 원격 코드 실행이 가능합니다. 인증된 모든 사용자관리자 권한 불필요는 git 서비스 사용자 셸을 획득할 수 있습니다. 취약점 템플릿에서 새 저장소를 생성할 때 Gitea/Forgejo는 템플릿 파일을 복사하고 .gitea/template에 나열된 파일에서 $REPODESCRIPTIO...
Gitea-Forgejo-CVE-2025-68937
Gitea 및 Forgejo에서의 임의 템플릿 확장 취약점 이 저작물은 Creative Commons Attribution-ShareAlike 4.0 International License에 따라 라이선스가 부여됩니다. 요약 Forgejo와 Gitea의 소스 코드를 확인하여 템플릿이 어떻게 수행되는지 더 잘 이해하는 과정에서, 인증된 사용자가 악성 템플릿 저장소를 생성하여 파일 시스템의 임의 파일을 처리할 수 있는 취약점을 발견했습니다. 악성 템플릿의 Git 콘텐츠를 기반으로 저장소를 생성할 때, 템플릿이 파일 시스템의 임의...
CVE-2026-60004
CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone 훅 주입 → post-index-change → 임의 명령 실행 개요 CVE-2026-60004 는 Gitea 및 Forgejo 자체 호스팅 Git 플랫폼의 버전 1.17부터 1.27.0까지 영향을 주는 치명적 심각도CVSS 9.8의 사전 인증pre-authentication 원격 코드 실행 취약점입니다. 이 취약점은 POST /api/v1/repos/owner/repo/diffpatch API 엔드포인트의 bare 클론 설계...
research-cve-2025-68971
CVE 2025-68971 | Holloway Chew, Kean Ho의 지식 연구 2025년 12월 22일, 오픈소스 애플리케이션 Forgejo 13.0.3에서 보안 취약점 CVE 2025-68971 CVSS: 5.5/중간이 발견되었으며, 이는 FreeBSD14 운영 체제에서 처음 탐지되었습니다. 이 취약점으로 인해 운영 체제가 모든 시스템 애플리케이션과 서비스를 대량 종료Mass-killing하게 되었습니다. 원인은 Forgejo가 첨부 파일 업로드 조각을 임시로 저장하기 위해 운영 체제의 사용 가능한 모든 여유 메모리를...
CVE-2024-45337
CVE-2024-45337에 대한 개념 증명 익스플로잇 === 이 저장소에는 CVE-2024-45337에 대한 개념 증명 익스플로잇이 포함되어 있습니다. 이는 golang.org/x/crypto = v0.30.0을 사용하여 구현되고 ServerConfig.PublicKeyCallback 콜백에서 권한을 안전하지 않은 방식으로 캐싱하는 SSH 서버와 상호작용할 때 ssh를 래핑하는 데 사용할 수 있습니다. Gitea = 1.22.4 및 Forgejo = 7.0.11, 9.0.2는 내부 SSH 서버를 사용하여 호스팅할 때 취약합니...
forgejo-longterm-15.0.8-1.1 on GA media (moderate)
forgejo-longterm-15.0.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11846-1 Rating: moderate Cross-References: CVE-2026-27660 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
OPENSUSE-SU-2026:11846-1 forgejo-longterm-15.0.8-1.1 on GA media
These are all security issues fixed in the forgejo-longterm-15.0.8-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 45 : forgejo (2026-e9a6f74bd2)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e9a6f74bd2 advisory. This is an upstream bug and security fix release. Please consult the upstream release notes for more details. Tenable has extracted the preceding description...
CVE-2026-90679
A flaw was found in Forgejo when federation is enabled. This issue allows a remote attacker to spoof identities by submitting signature-valid ActivityPub activities attributed to any actor identity. The system fails to verify that the HTTP Signature on an incoming ActivityPub activity was produce...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4 with [federation] ENABLED = true contains a signature-spoofing flaw in its ActivityPub inbox processing. The HTTP Signature verification in routers/api/v1/activitypub/reqsignature.go validates the request, but inbox handlers then read the acting identity from the att...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
EUVD-2026-76944
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
PT-2026-90787
Name of the Vulnerable Software and Affected Versions Forgejo versions 13.0.0 through 16.0.4 Description An identity spoofing issue exists when federation ENABLED = true is configured. The system fails to verify that the HTTP Signature of an incoming ActivityPub activity was generated by the key...
CVE-2026-90679: Use of Less Trusted Source
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-89151
A flaw was found in Forgejo. A remote attacker with low privileges could exploit this vulnerability by using restricted API tokens. This allows for unintended access to the "allow maintainer edit" feature, potentially leading to unauthorized modifications. Mitigation Mitigation for this issue is...
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature...