1986 matches found
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...
FreeBSD : gitea -- multiple vulnerabilities (a512a412-3a33-11ea-af63-0800274e5f20)
The Gitea Team reports : - Hide credentials when submitting migration - Never allow an empty password to validate - Prevent redirect to Host - Hide public repos owned by private orgs C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
FreeBSD : gitea -- multiple vulnerabilities (b12a341a-0932-11ea-bf09-080027e0baa0)
The Gitea Team reports : This release contains five security fixes, so we recommend updating : - Fix issue with user.fullname - Ignore mentions for users with no access - Be more strict with git arguments - Extract the username and password from the mirror url - Reserve .well-known username C...
gitea -- multiple vulnerabilities
The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.11.0: Never allow an empty password to validate 9682 9683 Prevent redirect to Host 9678 9679 Swagger hide search field 9554 Add "search" to reserved usernames 9063 Switch to fomantic-ui 9374 Only serve attachments when linked to issue/release and if accessible...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains five security fixes, so we recommend updating: Fix issue with user.fullname Ignore mentions for users with no access Be more strict with git arguments Extract the username and password from the mirror url Reserve .well-known username...
FreeBSD : gitea -- information disclosure (fd10aa77-fb5e-11e9-af7b-0800274e5f20)
The Gitea Team reports : When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
gitea -- information disclosure
The Gitea Team reports: When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository...
FreeBSD : gitea -- multiple vulnerabilities (e7392840-c520-11e9-a4ef-0800274e5f20)
The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains two security fixes, so we highly recommend updating...
FreeBSD : gitea -- multiple vulnerabilities (3b2ee737-c12d-11e9-aabc-0800274e5f20)
The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...
FreeBSD : gitea -- multiple vulnerabilities (e7b69694-b3b5-11e9-9bb6-0800274e5f20)
The Gitea Team reports : This version of Gitea contains security fixes that could not be backported to 1.8. For this reason, we strongly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains two security fixes, so we highly recommend updating...
gitea -- multiple vulnerabilities
The Gitea Team reports: This version of Gitea contains security fixes that could not be backported to 1.8. For this reason, we strongly recommend updating...
Gitea 1.7.2 - 1.7.3 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if...
CVE-2019-11229 detailed analysis --git config controllable-RCE-vulnerability warning-the black bar safety net
2019 4 January 15, gitea had burst through a hole, coinciding with the time of this vulnerability more curious proceed to study a bit, and the vulnerability of the description is this: models/repomirror. go in Gitea before 1.7.6 and 1.8. x before 1.8-RC3 mishandles mirror repo URL settings, leadi...
Gitea < 1.7.1 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if...
Cross-site Scripting (XSS)
github.com/go-gitea/gitea is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization, on the values of owner and repo, during the go-get URL generation...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...