CVE-2021-45328

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...

CVE-2021-45328

CVE-2021-45328 affects Gitea before 1.4.3 and is caused by an Open Redirect: URL Redirection to Untrusted Site via internal URLs. The public records in connected documents confirm the affected product/version and the redirect vulnerability, which could enable an attacker to redirect users to a ma...

CVE-2021-45327

Gitea CVE-2021-45327 affects Gitea prior to 1.11.2. The issue is described as Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API, which could let a remote attacker execute arbitrary code. Remediation in public references points to upgrading to ve...

CVE-2021-45327

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

CVE-2021-45327

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

CVE-2021-45327

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code...

CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45326

CVE-2021-45326 : The vulnerability affects Gitea (github.com/go-gitea/gitea) before version 1.5.2, where a cross-site request forgery (CSRF) flaw exists via API routes. The underlying issue is CSRF in API endpoints that can trigger state-changing POST requests without proper origin validation. Th...

CVE-2021-45326

Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...

CVE-2021-45325

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

CVE-2021-45325

Vulnerability: CVE-2021-45325 affects Gitea prior to 1.7.0. Root cause: SSRF via the OpenID URL handling. Affected software: Gitea (Go-based Git service); versions before 1.7.0 are susceptible. Impact: server-side request forgery potentially exposing internal network information (per sources desc...

CVE-2021-45325

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

Gitea 代码问题漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to a cross-site request forgery vulnerability, which stems from the product's OpenID URL not validating the user's identity and could be exploited to cause client-side code execution...

CVE-2021-45328: URL Redirection to Untrusted Site

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site 'Open Redirect' via internal URLs...

CVE-2021-45325: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulneraility exists in Gitea before 1.7.0 using the OpenID URL...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea, which stems from the failure of some of the product's user APIs to determine that a request originates from a trusted user. The vulnerability can be exploited to execute...

Gitea 跨站脚本漏洞

A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...

CVE-2021-45329: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field...

PT-2022-12321

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.5.1 Description A Cross Site Scripting XSS issue exists in the repository settings, specifically inside the external wiki/issue tracker URL field. This allows for potential exploitation. No information is provided abo...