UBUNTU-CVE-2021-45325

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

Code injection

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45325

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

UBUNTU-CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45328

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...

CVE-2021-45328

CVE-2021-45328 affects Gitea before 1.4.3 and is caused by an Open Redirect: URL Redirection to Untrusted Site via internal URLs. The public records in connected documents confirm the affected product/version and the redirect vulnerability, which could enable an attacker to redirect users to a ma...

CVE-2021-45327

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

CVE-2021-45327

Gitea CVE-2021-45327 affects Gitea prior to 1.11.2. The issue is described as Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API, which could let a remote attacker execute arbitrary code. Remediation in public references points to upgrading to ve...

CVE-2021-45327

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45326

CVE-2021-45326 : The vulnerability affects Gitea (github.com/go-gitea/gitea) before version 1.5.2, where a cross-site request forgery (CSRF) flaw exists via API routes. The underlying issue is CSRF in API endpoints that can trigger state-changing POST requests without proper origin validation. Th...

CVE-2021-45325

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

CVE-2021-45325

Vulnerability: CVE-2021-45325 affects Gitea prior to 1.7.0. Root cause: SSRF via the OpenID URL handling. Affected software: Gitea (Go-based Git service); versions before 1.7.0 are susceptible. Impact: server-side request forgery potentially exposing internal network information (per sources desc...

PT-2022-12321 · Gitea · Gitea

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.5.1 Description: A Cross Site Scripting XSS issue exists in the repository settings, specifically inside the external wiki/issue tracker URL field. This allows for potential exploitation. No information is provided...

Gitea 跨站请求伪造漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea suffers from a cross-site request forgery vulnerability, which stems from the product's multiple linked POST requests failing to properly determine that the user originated from a trusted user, and could be...

Gitea 代码问题漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to a cross-site request forgery vulnerability, which stems from the product's OpenID URL not validating the user's identity and could be exploited to cause client-side code execution...

Gitea 跨站脚本漏洞

A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...

Gitea 输入验证错误漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to an input validation error that stems from the product's failure to determine that a request originated from a trusted user, which could be exploited to send an unintended request to the server...