1986 matches found
CVE-2021-45325
Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...
CVE-2021-45325
Vulnerability: CVE-2021-45325 affects Gitea prior to 1.7.0. Root cause: SSRF via the OpenID URL handling. Affected software: Gitea (Go-based Git service); versions before 1.7.0 are susceptible. Impact: server-side request forgery potentially exposing internal network information (per sources desc...
Gitea 跨站请求伪造漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea suffers from a cross-site request forgery vulnerability, which stems from the product's multiple linked POST requests failing to properly determine that the user originated from a trusted user, and could be...
Gitea 代码问题漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to a cross-site request forgery vulnerability, which stems from the product's OpenID URL not validating the user's identity and could be exploited to cause client-side code execution...
PT-2022-12321 · Gitea · Gitea
Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.5.1 Description: A Cross Site Scripting XSS issue exists in the repository settings, specifically inside the external wiki/issue tracker URL field. This allows for potential exploitation. No information is provided...
Gitea 输入验证错误漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to an input validation error that stems from the product's failure to determine that a request originated from a trusted user, which could be exploited to send an unintended request to the server...
Gitea 跨站脚本漏洞
A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...
PT-2022-6562 · Gitea · Gitea
Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.5.2 Description: The issue is related to a Cross Site Request Forgery CSRF vulnerability in the Gitea Git repository management system interface. This vulnerability can be exploited by a remote attacker to perform a...
Gitea 安全漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea, which stems from the failure of some of the product's user APIs to determine that a request originates from a trusted user. The vulnerability can be exploited to execute...
PT-2022-12322 · Gitea +1 · Gitea +1
Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.15.8 Description: The issue exists due to client-side cookies not being deleted, and the session remains valid on the server side for reuse, allowing a malicious user to gain privileges. This is related to improper...
gitea -- information disclosure
The Gitea team reports: Prevent multiple To recipients: Change the mailer interface to prevent leaking of possible hidden email addresses when sending to multiple recipients...
FreeBSD : gitea -- multiple vulnerabilities (df794e5d-3975-11ec-84e8-0800273f11ea)
The Gitea Team reports for release 1.15.5 : - Upgrade Bluemonday to v1.0.16 17372 17374 - Ensure correct SSH permissions check for private and restricted users 17370 17373 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.15.5: Upgrade Bluemonday to v1.0.16 17372 17374 Ensure correct SSH permissions check for private and restricted users 17370 17373...
CVE-2021-39867
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...
CVE-2021-39867
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...
CVE-2021-39867
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...
UBUNTU-CVE-2021-39867
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...
Server side request forgery (ssrf)
In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...
