GLSA-202312-13 : Gitea: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-13 Gitea: Multiple Vulnerabilities - Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. CVE-2023-3515 Note that Nessus has not tested for this issue but has instead relied only on the application's...

FreeBSD : gitea -- Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin (b2765c89-a052-11ee-bed2-596753f1a87c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b2765c89-a052-11ee-bed2-596753f1a87c advisory. - The Gitea team reports: Update golang.org/x/crypto b2765c89-a052-11ee-bed2-596753f1a87c Note that...

gitea -- Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

The Gitea team reports: Update golang.org/x/crypto...

Authentication Bypass

gitea is vulnerable to Authentication Bypass. The vulnerability is caused when docker login uses basic authentication, which allows an attacker to bypass 2FA authentication...

FreeBSD : gitea -- block user account creation from blocked email domains (4061a4b2-4fb1-11ee-acc7-0151f07bc899)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4061a4b2-4fb1-11ee-acc7-0151f07bc899 advisory. - The Gitea team reports: check blocklist for emails when adding them to account 4061a4b2-4fb1-11ee-...

gitea -- missing permission checks

The Gitea team reports: Fix missing check Do some missing checks By crafting an API request, attackers can access the contents of issues even though the logged-in user does not have access rights to these issues...

gitea -- block user account creation from blocked email domains

The Gitea team reports: check blocklist for emails when adding them to account...

FreeBSD : gitea -- information disclosure (36a37c92-44b1-11ee-b091-6162c1274384)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 36a37c92-44b1-11ee-b091-6162c1274384 advisory. - The Gitea team reports: Fix API leaking Usermail if not logged in The API should only return the real...

Gitea 1.20.x < 1.20.1 RCE Vulnerability

Gitea is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea";...

Gitea erroneous repo clones

In Gitea through 1.17.1, repo cloning can occur in the migration function...

GHSA-8J3V-68W3-3848 Gitea erroneous repo clones

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

Design/Logic Flaw

In Gitea through 1.17.1, repo cloning can occur in the migration function...

Gitea Security Vulnerabilities

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.17.1 and prior versions, which stems from repository cloning occurring in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

PT-2023-13657 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.17.2 Description: The issue allows repo cloning to occur in the migration function. Recommendations: For versions prior to 1.17.2, update to version 1.17.2 or later to resolve the issue...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function...

CVE-2022-38795

Gitea prior to 1.17.2 is affected: repo cloning could occur in the migration function, enabling unintended repository clones during migrations. This aligns with multiple advisories describing the issue in 1.17.1 and earlier. A remediation indicated by the project release notes is to upgrade to Gi...