CVE-2022-27313: Undefined Security Weakness

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

PT-2022-20314

Name of the Vulnerable Software and Affected Versions Gitea versions 1.16.6 and prior Description The issue is related to the improper handling of git fetch, allowing for shell command injection. This is due to the lack of escaping for the git fetch remote. There is no information provided about...

gitea:fuzz_markup_post_process: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5079777251295232 Project: gitea Fuzzing Engine: libFuzzer Fuzz Target: fuzzmarkuppostprocess Job Type: libfuzzerasangitea Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

gitea -- Escape git fetch remote

The Gitea team reports: Escape git fetch remote in services/migrations/giteauploader.go...

Gitea < 1.16.5 Open Redirect Vulnerability

Gitea is prone to an open redirect vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : gitea -- Improper/incorrect authorization (0ff80f41-aefe-11ec-b4b6-d05099c0c059)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ff80f41-aefe-11ec-b4b6-d05099c0c059 advisory. - Improper Authorization in GitHub repository go-gitea/gitea prior to 1.16.4. CVE-2022-0905 Note that...

FreeBSD : gitea -- Open Redirect on login (83466f76-aefe-11ec-b4b6-d05099c0c059)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 83466f76-aefe-11ec-b4b6-d05099c0c059 advisory. - Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. CVE-2022-1058 Note that...

Open Redirect

github.com/go-gitea/gitea is vulnerable to open redirect. The vulnerability exists in RedirectToFirst function in context.go due to the presence of backslashes in the Locations which allows an attacker to parse malicious URLs to redirect the user...

Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

GHSA-4RQQ-RXVC-V2RC Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea Open Redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Open redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

CVE-2022-1058 affects Gitea (go-gitea/gitea) versions before 1.16.5. The issue is an open redirect in the login flow that can redirect users to a malicious site via redirect_to, potentially exposing sensitive information or enabling unauthorized actions. The Nuclei template and related advisories...

EUVD-2022-1315

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Gitea 输入验证错误漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.16.5, which stems from opening a redirect during login in Gitea versions prior to 1.16.5...