2925 matches found
gitea -- information disclosure
The Gitea Team reports: When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository...
FreeBSD : gitea -- multiple vulnerabilities (e7392840-c520-11e9-a4ef-0800274e5f20)
The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains two security fixes, so we highly recommend updating...
FreeBSD : gitea -- multiple vulnerabilities (3b2ee737-c12d-11e9-aabc-0800274e5f20)
The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...
FreeBSD : gitea -- multiple vulnerabilities (e7b69694-b3b5-11e9-9bb6-0800274e5f20)
The Gitea Team reports : This version of Gitea contains security fixes that could not be backported to 1.8. For this reason, we strongly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains two security fixes, so we highly recommend updating...
gitea -- multiple vulnerabilities
The Gitea Team reports: This version of Gitea contains security fixes that could not be backported to 1.8. For this reason, we strongly recommend updating...
Gitea 1.7.2 - 1.7.3 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if...
Gitea < 1.7.1 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if...
CVE-2019-11229 detailed analysis --git config controllable-RCE-vulnerability warning-the black bar safety net
2019 4 January 15, gitea had burst through a hole, coinciding with the time of this vulnerability more curious proceed to study a bit, and the vulnerability of the description is this: models/repomirror. go in Gitea before 1.7.6 and 1.8. x before 1.8-RC3 mishandles mirror repo URL settings, leadi...
Cross-site Scripting (XSS)
github.com/go-gitea/gitea is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization, on the values of owner and repo, during the go-get URL generation...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
Cross site scripting
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
UBUNTU-CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the go-get URL generation component. The attack requires a victim to open a specially crafted URL, enabling execution of arbitrary JavaScript in the victim’s browser. The issue is mitigated by upgrading to 1.7.1 ...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...
CVE-2019-1010261: Improper Neutralization of Input During Web Page Generation
Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...