2925 matches found
UBUNTU-CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Improper access control
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Gitea 安全漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.16.9 that stems from improper access control. An attacker exploiting this vulnerability could assign any issue to any project in Gitea...
CVE-2022-38183: Missing Authorization
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
CVE-2022-38183 affects Gitea before 1.16.9. The issue arises from improper access controls that allowed a user to add existing issues to any project without a proper permission check when fetching the issue, enabling an attacker to assign any issue to any project and access private issue titles. ...
FreeBSD : gitea -- multiple issues (df29c391-1046-11ed-a7ac-0800273f11ea)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the df29c391-1046-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Add write check for creating Commit status Check for permission when fetching...
FreeBSD : gitea -- multiple issues (8bec3994-104d-11ed-a7ac-0800273f11ea)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8bec3994-104d-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit...
PT-2022-24262
Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.16.9 Description The issue is related to improper access controls in Gitea, allowing an attacker to assign any issue to any project. This results in the attacker gaining access to private issue titles due to the lack ...
gitea -- multiple issues
The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit status Remove deprecated SSH ciphers from default...
gitea -- multiple issues
The Gitea team reports: Add write check for creating Commit status Check for permission when fetching user controlled issues...
Gitea < 1.16.9 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Cross-site Scripting (XSS)
github.com/go-gitea/gitea is vulnerable to cross-site scripting. Lack of proper handling of MIME type of SVG images allows an attacker to inject and execute malicious script through it...
Gitea Cross-Site Scripting Vulnerability (CNVD-2022-66680)
Gitea is a lightweight Go-based git service developed by the Gitea community. cross-site scripting vulnerabilities exist in versions of Gitea prior to 1.16.9. No detailed vulnerability details are currently available...
