2050 matches found
CVE-2018-1000803
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email...
openSUSE Security Advisory (openSUSE-SU-2025:0094-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gitea 1.24.0 Cross Site Scripting
Gitea version 1.24.0 suffers from a persistent cross site scripting vulnerability. Exploit Title: Gitea 1.24.0 - HTML Injection Date: 2025-03-09 Exploit Author: Mikail KOCADAĞ Vendor Homepage: https://gitea.com Software Link: https://dl.gitea.io/gitea/1.24.0/ Version: 1.24.0 Tested on: Windows 10...
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, kots, gitea, authservice, fluent-bit-plugin-loki, atlantis, falcosidekick, splunk-otel-collector...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, kots, gitea, authservice, fluent-bit-plugin-loki, atlantis, falcosidekick, splunk-otel-collector...
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: argo-cd, dapr, oauth2-proxy, traefik-fips, splunk-otel-collector-fips, rekor-fips, opentelemetry-collector-contrib-fips, atlantis, authservice, mattermost-fips, keda, kots, falcosidekick-fips, gitea, argo-cd-fips, loki-fips, dapr-fips, juicefs, falcosidekick,...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: argo-cd, dapr, oauth2-proxy, traefik-fips, splunk-otel-collector-fips, rekor-fips, opentelemetry-collector-contrib-fips, atlantis, authservice, mattermost-fips, keda, kots, falcosidekick-fips, gitea, argo-cd-fips, loki-fips, dapr-fips, juicefs, falcosidekick,...
openSUSE 15 Security Update : gitea-tea (openSUSE-SU-2025:0094-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0094-1 advisory. - gitea-te: update newer dependencies to fix security issues boo1235367 boo1239493 boo1234598 Tenable has extracted the preceding description blo...
OPENSUSE-SU-2025:0094-1 Security update for gitea-tea
This update for gitea-tea fixes the following issues: - gitea-te: update newer dependencies to fix security issues boo1235367 boo1239493 boo1234598...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2025:0094-1 Rating: moderate References: 1234598 1235367 1239493 Cross-References: CVE-2024-45337 CVE-2024-45338 CVE-2025-22869 CVSS scores: CVE-2024-45337 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H...
Gitea 1.24.0 - HTML Injection
Exploit Title: Gitea 1.24.0 - HTML Injection Date: 2025-03-09 Exploit Author: Mikail KOCADAĞ Vendor Homepage: https://gitea.com Software Link: https://dl.gitea.io/gitea/1.24.0/ Version: 1.24.0 Tested on: Windows 10, Linux Ubuntu 22.04 CVE : N/A Vulnerability Description: In Gitea 1.24.0, the...
Gitea 1.24.0+dev HTML Injection / Cross Site Scripting
Gitea version 1.24.0+dev suffers from an html injection vulnerability that can allow for cross site scripting. Title: Gitea 1.24.0+dev HTML Injection Vulnerability Description: Gitea version 1.24.0+dev-355-g74c8e95e87 is vulnerable to an HTML Injection vulnerability. The issue arises due to...
CVE-2022-1058
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...
Exploit for CVE-2024-45337
Proof of Concept exploit for CVE-2024-45337 === This repository...
FreeBSD : gitea -- multiple vulnerabilities (6ea20f0c-bca3-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6ea20f0c-bca3-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
FreeBSD : gitea -- Fix misuse of PublicKeyCallback (38e6f778-bca3-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 38e6f778-bca3-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
FreeBSD : gitea -- multiple vulnerabilities (453cd84e-bca4-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 453cd84e-bca4-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
gitea -- Fix misuse of PublicKeyCallback
Problem Description: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...
GHSA-V778-237X-GJRC vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-lambda, terragrunt, containerd, portieris, undock, vcluster, crossplane-provider-aws-s3, filebrowser, podman, kyverno-notation-aws, litestream, crossplane-provider-azure, crossplane-provider-aws-cloudwatchlogs,...