FreeBSD : gitea -- multiple vulnerabilities (1650cee2-a320-11ea-a090-08002734b9ed)

The Gitea Team reports for release 1.11.6 : - Fix missing authorization check on pull for public repos of private/limited org 11656 11683 - Use session for retrieving org teams 11438 11439 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Gitea < 1.11.6 DoS Vulnerability

Gitea is prone to a denial of service DoS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Denial Of Service (DoS)

github.com/go-gitea/gitea is vulnerable to denial of service DoS. The vulnerability exists during the transferring of ownership between organizations...

Gitea Deadlock Vulnerability

Gitea is an open source community-driven clone of Gogs, a lightweight code hosting solution with a backend written in Go under the MIT license. A deadlock vulnerability exists in Gitea 1.11.5 and earlier versions. An attacker can exploit this vulnerability to cause a deadlock by initiating a...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

Design/Logic Flaw

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

CVE-2020-13246 affects Gitea up to version 1.11.5. A deadlock can be triggered during a transfer of a repository’s ownership from one organization to another. The connected documents confirm the affected software and the faulty transfer workflow as the root cause (deadlock), but do not provide te...

PT-2020-13393 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions through 1.11.5 Description: An issue was discovered in Gitea where an attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another. Recommendations: For Gitea versions...

CVE-2020-13246: Improper Locking

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

FreeBSD : gitea -- multiple vulnerabilities (be088777-6085-11ea-8609-08002731610e)

The Gitea Team reports for release 1.11.0 : - Never allow an empty password to validate 9682 9683 - Prevent redirect to Host 9678 9679 - Swagger hide search field 9554 - Add 'search' to reserved usernames 9063 - Switch to fomantic-ui 9374 - Only serve attachments when linked to issue/release and ...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...

FreeBSD : gitea -- multiple vulnerabilities (a512a412-3a33-11ea-af63-0800274e5f20)

The Gitea Team reports : - Hide credentials when submitting migration - Never allow an empty password to validate - Prevent redirect to Host - Hide public repos owned by private orgs C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : gitea -- multiple vulnerabilities (b12a341a-0932-11ea-bf09-080027e0baa0)

The Gitea Team reports : This release contains five security fixes, so we recommend updating : - Fix issue with user.fullname - Ignore mentions for users with no access - Be more strict with git arguments - Extract the username and password from the mirror url - Reserve .well-known username C...

gitea -- multiple vulnerabilities

The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.0: Never allow an empty password to validate 9682 9683 Prevent redirect to Host 9678 9679 Swagger hide search field 9554 Add "search" to reserved usernames 9063 Switch to fomantic-ui 9374 Only serve attachments when linked to issue/release and if accessible...

gitea -- multiple vulnerabilities

The Gitea Team reports: This release contains five security fixes, so we recommend updating: Fix issue with user.fullname Ignore mentions for users with no access Be more strict with git arguments Extract the username and password from the mirror url Reserve .well-known username...

FreeBSD : gitea -- information disclosure (fd10aa77-fb5e-11e9-af7b-0800274e5f20)

The Gitea Team reports : When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...