Privilege Escalation

code.gitea.io/gitea is vulnerable to Privilege Escalation. The vulnerability is due to the absence of proper permission checks in Gitea, which allows attackers to assign issues to projects without verifying whether they have the necessary access rights...

FreeBSD : gitea -- multiple issues (f5d0cfe7-6ba6-11ef-858b-23eeba13701a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f5d0cfe7-6ba6-11ef-858b-23eeba13701a advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Gitea 1.22.0 Cross Site Scripting

Exploit Title: Stored XSS in Gitea Date: 27/08/2024 Exploit Authors: Catalin Iovita & Alexandru Postolache Vendor Homepage: https://github.com/go-gitea/gitea Version: 1.22.0 Tested on: Linux 5.15.0-107, Go 1.23.0 CVE: CVE-2024-6886 Vulnerability Description Gitea 1.22.0 is vulnerable to a Stored...

Gitea 1.22.0 - Stored XSS

Exploit Title: Stored XSS in Gitea Date: 27/08/2024 Exploit Authors: Catalin Iovita & Alexandru Postolache Vendor Homepage: https://github.com/go-gitea/gitea Version: 1.22.0 Tested on: Linux 5.15.0-107, Go 1.23.0 CVE: CVE-2024-6886 Vulnerability Description Gitea 1.22.0 is vulnerable to a Stored...

Gitea 1.22.0 - Stored XSS Vulnerability

Exploit Title: Stored XSS in Gitea Exploit Authors: Catalin Iovita & Alexandru Postolache Vendor Homepage: https://github.com/go-gitea/gitea Version: 1.22.0 Tested on: Linux 5.15.0-107, Go 1.23.0 CVE: CVE-2024-6886 Vulnerability Description Gitea 1.22.0 is vulnerable to a Stored Cross-Site...

GO-2022-1065 Gitea vulnerable to Argument Injection in code.gitea.io/gitea

Gitea vulnerable to Argument Injection in code.gitea.io/gitea...

GO-2022-0982 Improper Privilege Management in Gitea in code.gitea.io/gitea

Improper Privilege Management in Gitea in code.gitea.io/gitea...

GO-2022-0862 Gitea Improper Input Validation in github.com/go-gitea/gitea

Gitea Improper Input Validation in github.com/go-gitea/gitea...

GO-2022-0832 Cross-site Scripting in Gitea in code.gitea.io/gitea

Cross-site Scripting in Gitea in code.gitea.io/gitea...

GO-2022-0846 Gitea Remote Code Execution in github.com/go-gitea/gitea

Gitea Remote Code Execution in github.com/go-gitea/gitea...

GO-2022-0830 Denial of Service in Gitea in code.gitea.io/gitea

Denial of Service in Gitea in code.gitea.io/gitea...

GO-2022-0844 Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

Gitea Remote Code Execution RCE in code.gitea.io/gitea...

GO-2022-0823 Gitea Exposes Private Email Addresses in github.com/go-gitea/gitea

Gitea Exposes Private Email Addresses in github.com/go-gitea/gitea...

GO-2022-0612 Stored Cross-site Scripting in gitea in code.gitea.io/gitea

Stored Cross-site Scripting in gitea in code.gitea.io/gitea...

GO-2022-0609 Gitea Missing Authorization vulnerability in code.gitea.io/gitea

Gitea Missing Authorization vulnerability in code.gitea.io/gitea...

GO-2022-0579 Open redirect in Gitea in github.com/go-gitea/gitea

Open redirect in Gitea in github.com/go-gitea/gitea...

GO-2022-0442 Arbitrary file deletion in gitea in code.gitea.io/gitea

Arbitrary file deletion in gitea in code.gitea.io/gitea...

GO-2022-0450 Shell command injection in gitea in code.gitea.io/gitea

Shell command injection in gitea in code.gitea.io/gitea...

GO-2022-0315 Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea...

GO-2022-0314 Cross-site Scripting in Gitea in github.com/go-gitea/gitea

Cross-site Scripting in Gitea in github.com/go-gitea/gitea...