2925 matches found
Gitea Allows 1FA Even for 2FA-Enrolled Accounts
Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password...
Exploit for Improper Encoding or Escaping of Output in Gitea
🍵 CVE-2022-30781 Gitea repository migration remote command exe...
Gitea < 1.16.7 Privilege Escalation Vulnerability
Gitea is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
Remote Code Execution (RCE)
github.com/go-gitea/gitea is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the newPullRequest function in the giteauploader.go file allowing an attacker to inject maliciously crafted script into the system...
Shell command injection in gitea
Gitea before 1.16.7 does not escape the shell out for git fetch remote allowing for shell command injection...
GHSA-P5F9-C9J9-G8QX Shell command injection in gitea
Gitea before 1.16.7 does not escape the shell out for git fetch remote allowing for shell command injection...
Improper Encoding or Escaping of Output
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
Design/Logic Flaw
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781
CVE-2022-30781 affects Gitea prior to 1.16.7. The issue arises from improper escaping in the git fetch remote during repository migration, enabling remote command execution. Public details confirm a Git fetch remote code path as the root cause and that versions before 1.16.7 are vulnerable; mitig...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781: Improper Encoding or Escaping of Output
Gitea before 1.16.7 does not escape git fetch remote...
Gitea 安全漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.16.7 that stems from not escaping the git fetch remote...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
Gitea Git Fetch Remote Code Execution
This module exploits Git fetch command in Gitea repository migration process that leads to a remote command execution on the system. This vulnerability affect Gitea before 1.16.7 version. Module Options msf use exploit/multi/http/gitea/gitfetchrce msf undefinedgitfetchrce show actions ...actions...
Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services...