2036 matches found
Gitea < 1.11.6 DoS Vulnerability
Gitea is prone to a denial of service DoS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Denial Of Service (DoS)
github.com/go-gitea/gitea is vulnerable to denial of service DoS. The vulnerability exists during the transferring of ownership between organizations...
Gitea Deadlock Vulnerability
Gitea is an open source community-driven clone of Gogs, a lightweight code hosting solution with a backend written in Go under the MIT license. A deadlock vulnerability exists in Gitea 1.11.5 and earlier versions. An attacker can exploit this vulnerability to cause a deadlock by initiating a...
CVE-2020-13246
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...
CVE-2020-13246
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...
Design/Logic Flaw
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...
CVE-2020-13246
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...
CVE-2020-13246
CVE-2020-13246 affects Gitea up to version 1.11.5. A deadlock can be triggered during a transfer of a repository’s ownership from one organization to another. The connected documents confirm the affected software and the faulty transfer workflow as the root cause (deadlock), but do not provide te...
PT-2020-13393 · Gitea +1 · Gitea +1
Name of the Vulnerable Software and Affected Versions: Gitea versions through 1.11.5 Description: An issue was discovered in Gitea where an attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another. Recommendations: For Gitea versions...
FreeBSD : gitea -- multiple vulnerabilities (be088777-6085-11ea-8609-08002731610e)
The Gitea Team reports for release 1.11.0 : - Never allow an empty password to validate 9682 9683 - Prevent redirect to Host 9678 9679 - Swagger hide search field 9554 - Add 'search' to reserved usernames 9063 - Switch to fomantic-ui 9374 - Only serve attachments when linked to issue/release and ...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...
FreeBSD : gitea -- multiple vulnerabilities (a512a412-3a33-11ea-af63-0800274e5f20)
The Gitea Team reports : - Hide credentials when submitting migration - Never allow an empty password to validate - Prevent redirect to Host - Hide public repos owned by private orgs C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
FreeBSD : gitea -- multiple vulnerabilities (b12a341a-0932-11ea-bf09-080027e0baa0)
The Gitea Team reports : This release contains five security fixes, so we recommend updating : - Fix issue with user.fullname - Ignore mentions for users with no access - Be more strict with git arguments - Extract the username and password from the mirror url - Reserve .well-known username C...
gitea -- multiple vulnerabilities
The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.11.0: Never allow an empty password to validate 9682 9683 Prevent redirect to Host 9678 9679 Swagger hide search field 9554 Add "search" to reserved usernames 9063 Switch to fomantic-ui 9374 Only serve attachments when linked to issue/release and if accessible...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains five security fixes, so we recommend updating: Fix issue with user.fullname Ignore mentions for users with no access Be more strict with git arguments Extract the username and password from the mirror url Reserve .well-known username...
FreeBSD : gitea -- information disclosure (fd10aa77-fb5e-11e9-af7b-0800274e5f20)
The Gitea Team reports : When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
gitea -- information disclosure
The Gitea Team reports: When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository...
FreeBSD : gitea -- multiple vulnerabilities (e7392840-c520-11e9-a4ef-0800274e5f20)
The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...