2925 matches found
Gitea 授权问题漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to an authorization issue in versions prior to 1.5.0, which stems from the application's lack of authentication measures or insufficient authentication strength. An attacker could exploit the...
CVE-2021-45331: Improper Authentication
An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once...
PT-2022-12323
Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.5.0 Description The issue allows a malicious user to bypass authentication, potentially gaining privileges. Specifically, it enables the reuse of one-time passwords, including the TOTP code for 2FA, which can be...
Gitea 安全漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea suffers from a security vulnerability that stems from a Gitea client-side cookie from 1.15.7 not being deleted and the session remaining valid on the server side for reuse. An attacker can exploit this vulnerabili...
CVE-2021-45330: Incomplete Cleanup
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
UBUNTU-CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
CVE-2021-45329 describes a cross-site scripting (XSS) vulnerability in Gitea prior to 1.5.1, triggered via the repository settings in the external wiki/issue tracker URL field. The affected component is the Gitea web application; root cause is improper handling/escaping of input in that URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45329
Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...
CVE-2021-45328
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...
CVE-2021-45328
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...
CVE-2021-45328
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...