2043 matches found
GO-2022-0308 Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea
Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea...
GO-2023-1999 Gitea erroneous repo clones in code.gitea.io/gitea
Gitea erroneous repo clones in code.gitea.io/gitea...
GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea...
GO-2023-1922 Gitea XSS Vulnerability in code.gitea.io/gitea
Gitea XSS Vulnerability in code.gitea.io/gitea...
The vulnerability of the Git repository management system Gitea arises from the lack of measures taken to protect the structure of the web page. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Git repository management system Gitea exists due to the lack of measures taken to protect the structure of the web interface. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Stored Cross Site Scripting (XSS)
code.gitea.io/gitea is vulnerable to Stored Cross Site Scripting XSS. The vulnerability is due to improper sanitization in modules/markup/sanitizer.go, which results in Stored Cross Site Scripting...
GO-2024-3056 Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea
Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea...
CVE-2024-6886
A flaw was found in Gitea. This issue may allow cross-site scripting XSS due to improper input sanitization, which can allow an attacker to inject a malicious script into web pages viewed by other users. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and...
Gitea Cross-site Scripting Vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
GHSA-4H4P-553M-46QH Gitea Cross-site Scripting Vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
CVE-2024-6886
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
CVE-2024-6886 Inproper Sanitation of field leading to stored XSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
CVE-2024-6886 Inproper Sanitation of field leading to stored XSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
CVE-2024-6886
Summary: CVE-2024-6886 is a stored XSS vulnerability in Gitea 1.22.0 that allows authenticated attackers to inject JavaScript via repository descriptions, which is stored on the server and executed in other users’ sessions. The Nuclei template, Exploit-DB entry, and OSV entries confirm the issue ...
CVE-2024-6886 Inproper Sanitation of field leading to stored XSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
Gitea 跨站脚本漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.22.0 that stems from improper input neutralization during page generation, which could lead to a stored cross-site scripting attack...
Gitea Cross-site Scripting Vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0...
Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service
Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or wipe source code, and even plant backdoors. The vulnerabilities, according to...