CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

Design/Logic Flaw

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

CVE-2020-13246

CVE-2020-13246 affects Gitea up to version 1.11.5. A deadlock can be triggered during a transfer of a repository’s ownership from one organization to another. The connected documents confirm the affected software and the faulty transfer workflow as the root cause (deadlock), but do not provide te...

PT-2020-13393 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions through 1.11.5 Description: An issue was discovered in Gitea where an attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another. Recommendations: For Gitea versions...

CVE-2020-13246: Improper Locking

An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another...

FreeBSD : gitea -- multiple vulnerabilities (be088777-6085-11ea-8609-08002731610e)

The Gitea Team reports for release 1.11.0 : - Never allow an empty password to validate 9682 9683 - Prevent redirect to Host 9678 9679 - Swagger hide search field 9554 - Add 'search' to reserved usernames 9063 - Switch to fomantic-ui 9374 - Only serve attachments when linked to issue/release and ...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.6: Fix missing authorization check on pull for public repos of private/limited org 11656 11683 Use session for retrieving org teams 11438 11439...

FreeBSD : gitea -- multiple vulnerabilities (a512a412-3a33-11ea-af63-0800274e5f20)

The Gitea Team reports : - Hide credentials when submitting migration - Never allow an empty password to validate - Prevent redirect to Host - Hide public repos owned by private orgs C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : gitea -- multiple vulnerabilities (b12a341a-0932-11ea-bf09-080027e0baa0)

The Gitea Team reports : This release contains five security fixes, so we recommend updating : - Fix issue with user.fullname - Ignore mentions for users with no access - Be more strict with git arguments - Extract the username and password from the mirror url - Reserve .well-known username C...

gitea -- multiple vulnerabilities

The Gitea Team reports: Hide credentials when submitting migration Never allow an empty password to validate Prevent redirect to Host Hide public repos owned by private orgs...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.11.0: Never allow an empty password to validate 9682 9683 Prevent redirect to Host 9678 9679 Swagger hide search field 9554 Add "search" to reserved usernames 9063 Switch to fomantic-ui 9374 Only serve attachments when linked to issue/release and if accessible...

gitea -- multiple vulnerabilities

The Gitea Team reports: This release contains five security fixes, so we recommend updating: Fix issue with user.fullname Ignore mentions for users with no access Be more strict with git arguments Extract the username and password from the mirror url Reserve .well-known username...

FreeBSD : gitea -- information disclosure (fd10aa77-fb5e-11e9-af7b-0800274e5f20)

The Gitea Team reports : When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

gitea -- information disclosure

The Gitea Team reports: When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository...

FreeBSD : gitea -- multiple vulnerabilities (e7392840-c520-11e9-a4ef-0800274e5f20)

The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...

gitea -- multiple vulnerabilities

The Gitea Team reports: This release contains two security fixes, so we highly recommend updating...

FreeBSD : gitea -- multiple vulnerabilities (3b2ee737-c12d-11e9-aabc-0800274e5f20)

The Gitea Team reports : This release contains two security fixes, so we highly recommend updating. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...