PT-2022-18374 · Gitea · Gitea

Name of the Vulnerable Software and Affected Versions: Gitea version 1.16.3 Description: The issue allows attackers to cause a Denial of Service DoS via deleting the configuration file. This is due to an arbitrary file deletion vulnerability. Recommendations: For Gitea version 1.16.3, update to a...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.16.3 that originates from a denial of service DoS via deletion of a configuration file. An attacker can exploit the vulnerability to delete arbitrary files...

PT-2022-20314

Name of the Vulnerable Software and Affected Versions Gitea versions 1.16.6 and prior Description The issue is related to the improper handling of git fetch, allowing for shell command injection. This is due to the lack of escaping for the git fetch remote. There is no information provided about...

gitea -- Escape git fetch remote

The Gitea team reports: Escape git fetch remote in services/migrations/giteauploader.go...

FreeBSD : gitea -- Improper/incorrect authorization (0ff80f41-aefe-11ec-b4b6-d05099c0c059)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ff80f41-aefe-11ec-b4b6-d05099c0c059 advisory. - Improper Authorization in GitHub repository go-gitea/gitea prior to 1.16.4. CVE-2022-0905 Note that...

FreeBSD : gitea -- Open Redirect on login (83466f76-aefe-11ec-b4b6-d05099c0c059)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 83466f76-aefe-11ec-b4b6-d05099c0c059 advisory. - Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. CVE-2022-1058 Note that...

Gitea < 1.16.5 Open Redirect Vulnerability

Gitea is prone to an open redirect vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Open Redirect

github.com/go-gitea/gitea is vulnerable to open redirect. The vulnerability exists in RedirectToFirst function in context.go due to the presence of backslashes in the Locations which allows an attacker to parse malicious URLs to redirect the user...

GHSA-4RQQ-RXVC-V2RC Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Open redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

EUVD-2022-1315

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

CVE-2022-1058 affects Gitea (go-gitea/gitea) versions before 1.16.5. The issue is an open redirect in the login flow that can redirect users to a malicious site via redirect_to, potentially exposing sensitive information or enabling unauthorized actions. The Nuclei template and related advisories...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea 输入验证错误漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.16.5, which stems from opening a redirect during login in Gitea versions prior to 1.16.5...

gitea -- Open Redirect on login

Andrew Thornton reports: When a location containing backslashes is presented, the existing protections against open redirect are bypassed, because browsers will convert adjacent forward and backslashes within the location to double forward slashes...