FreeBSD : gitea -- multiple issues (8bec3994-104d-11ed-a7ac-0800273f11ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8bec3994-104d-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit...

FreeBSD : gitea -- multiple issues (df29c391-1046-11ed-a7ac-0800273f11ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the df29c391-1046-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Add write check for creating Commit status Check for permission when fetching...

gitea -- multiple issues

The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit status Remove deprecated SSH ciphers from default...

gitea -- multiple issues

The Gitea team reports: Add write check for creating Commit status Check for permission when fetching user controlled issues...

Gitea < 1.16.9 XSS Vulnerability

Gitea is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Cross-site Scripting (XSS)

github.com/go-gitea/gitea is vulnerable to cross-site scripting. Lack of proper handling of MIME type of SVG images allows an attacker to inject and execute malicious script through it...

Gitea Cross-Site Scripting Vulnerability (CNVD-2022-66680)

Gitea is a lightweight Go-based git service developed by the Gitea community. cross-site scripting vulnerabilities exist in versions of Gitea prior to 1.16.9. No detailed vulnerability details are currently available...

Stored Cross-site Scripting in gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs...

GHSA-PH3W-2843-72MX Stored Cross-site Scripting in gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

CVE-2022-1928 affects go-gitea/gitea up to version 1.16.9, with stored Cross-site Scripting in user-facing content. The vulnerability is caused by unfiltered/pdf content handling that allows attacker-supplied data to be stored and later rendered in a web page, enabling XSS. Multiple connected sou...

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

Gitea 跨站脚本漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. cross-site scripting vulnerabilities exist in versions of Gitea prior to 1.16.9. No detailed vulnerability details are currently available...

PT-2022-14196 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: gitea versions prior to 1.16.9 Description: The issue is related to Stored Cross-site Scripting XSS in the GitHub repository go-gitea/gitea. This occurs via unfiltered pdfs. Recommendations: For versions prior to 1.16.9, update to version...

GHSA-Q98C-RQX7-7GHF Improper handling of untrusted branches in Gitea Jenkins Plugin

Jenkins Gitea Plugin prior to 1.1.2 did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted...

Improper handling of untrusted branches in Gitea Jenkins Plugin

Jenkins Gitea Plugin prior to 1.1.2 did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted...

GHSA-5RH7-6GFJ-MC87 Gitea XSS Vulnerability

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...