168 matches found
CVE-2025-68937
CVE-2025-68937 - Gitea/Forgejo テンプレートシンボリックリンクRCE CVE-2025-68937 の自動化された概念実証（PoC）: Gitea および Forgejo のテンプレートリポジトリ処理におけるシンボリックリンクの逆参照によるディレクトリトラバーサルを利用し、リモートコード実行（RCE）に至ります。 認証済みの任意のユーザー （管理者権限は不要）が、git サービスユーザーとしてシェルを取得できます。 脆弱性 テンプレートから新しいリポジトリを生成する際、Gitea/Forgejo はテンプレートファイルをコピーし、.gitea/templat...
Gitea-Forgejo-CVE-2025-68937
Gitea 및 Forgejo에서의 임의 템플릿 확장 취약점 이 저작물은 Creative Commons Attribution-ShareAlike 4.0 International License에 따라 라이선스가 부여됩니다. 요약 Forgejo와 Gitea의 소스 코드를 확인하여 템플릿이 어떻게 수행되는지 더 잘 이해하는 과정에서, 인증된 사용자가 악성 템플릿 저장소를 생성하여 파일 시스템의 임의 파일을 처리할 수 있는 취약점을 발견했습니다. 악성 템플릿의 Git 콘텐츠를 기반으로 저장소를 생성할 때, 템플릿이 파일 시스템의 임의...
CVE-2026-60004
CVE-2026-60004 — Gitea Diffpatch Git フック RCE ベアクローンフックインジェクション → post-index-change → 任意コマンド実行 概要 CVE-2026-60004 は、Gitea および Forgejo のセルフホスト型 Git プラットフォームにおける深刻度クリティカル CVSS 9.8 の事前認証 リモートコード実行脆弱性であり、バージョン 1.17 から 1.27.0 に影響します。 この脆弱性は、POST /api/v1/repos/owner/repo/diffpatch API...
research-cve-2025-68971
CVE 2025-68971 | Holloway Chew, Kean Ho의 지식 연구 2025년 12월 22일, 오픈소스 애플리케이션 Forgejo 13.0.3에서 보안 취약점 CVE 2025-68971 CVSS: 5.5/중간이 발견되었으며, 이는 FreeBSD14 운영 체제에서 처음 탐지되었습니다. 이 취약점으로 인해 운영 체제가 모든 시스템 애플리케이션과 서비스를 대량 종료Mass-killing하게 되었습니다. 원인은 Forgejo가 첨부 파일 업로드 조각을 임시로 저장하기 위해 운영 체제의 사용 가능한 모든 여유 메모리를...
CVE-2024-45337
CVE-2024-45337에 대한 개념 증명 익스플로잇 === 이 저장소에는 CVE-2024-45337에 대한 개념 증명 익스플로잇이 포함되어 있습니다. 이는 golang.org/x/crypto = v0.30.0을 사용하여 구현되고 ServerConfig.PublicKeyCallback 콜백에서 권한을 안전하지 않은 방식으로 캐싱하는 SSH 서버와 상호작용할 때 ssh를 래핑하는 데 사용할 수 있습니다. Gitea = 1.22.4 및 Forgejo = 7.0.11, 9.0.2는 내부 SSH 서버를 사용하여 호스팅할 때 취약합니...
forgejo-longterm-15.0.8-1.1 on GA media (moderate)
forgejo-longterm-15.0.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11846-1 Rating: moderate Cross-References: CVE-2026-27660 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
OPENSUSE-SU-2026:11846-1 forgejo-longterm-15.0.8-1.1 on GA media
These are all security issues fixed in the forgejo-longterm-15.0.8-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 45 : forgejo (2026-e9a6f74bd2)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e9a6f74bd2 advisory. This is an upstream bug and security fix release. Please consult the upstream release notes for more details. Tenable has extracted the preceding description...
CVE-2026-90679
A flaw was found in Forgejo when federation is enabled. This issue allows a remote attacker to spoof identities by submitting signature-valid ActivityPub activities attributed to any actor identity. The system fails to verify that the HTTP Signature on an incoming ActivityPub activity was produce...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4 with [federation] ENABLED = true contains a signature-spoofing flaw in its ActivityPub inbox processing. The HTTP Signature verification in routers/api/v1/activitypub/reqsignature.go validates the request, but inbox handlers then read the acting identity from the att...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-90679
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
EUVD-2026-76944
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
PT-2026-90787
Name of the Vulnerable Software and Affected Versions Forgejo versions 13.0.0 through 16.0.4 Description An identity spoofing issue exists when federation ENABLED = true is configured. The system fails to verify that the HTTP Signature of an incoming ActivityPub activity was generated by the key...
CVE-2026-90679: Use of Less Trusted Source
Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...
CVE-2026-89151
A flaw was found in Forgejo. A remote attacker with low privileges could exploit this vulnerability by using restricted API tokens. This allows for unintended access to the "allow maintainer edit" feature, potentially leading to unauthorized modifications. Mitigation Mitigation for this issue is...
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature...