GO-2022-0314 Cross-site Scripting in Gitea in github.com/go-gitea/gitea

Cross-site Scripting in Gitea in github.com/go-gitea/gitea...

GO-2022-0309 Cross Site Request Forgery in Gitea in github.com/go-gitea/gitea

Cross Site Request Forgery in Gitea in github.com/go-gitea/gitea...

BIT-GITEA-2022-0905 Missing Authorization in go-gitea/gitea

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

Open Redirect

github.com/go-gitea/gitea is vulnerable to Open Redirect. The vulnerability exists due to improper path sanitization in the RedirectToFirst function, which allows an attacker to pass a crafted POST request, redirecting the victim to a malicious site...

CVE-2023-3515 Open Redirect in go-gitea/gitea

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

CVE-2023-3515 Open Redirect in go-gitea/gitea

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

CVE-2023-3515

CVE-2023-3515 is an Open Redirect in go-gitea/gitea prior to 1.19.4. The issue involves a redirect mechanism (redirect_to) that can cause a 302 redirect to an untrusted site, enabling potential user redirection to a malicious domain. Affected product: Gitea (Git service) with the vulnerable path ...

Stored Cross-site Scripting in gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

CVE-2022-1928 affects go-gitea/gitea up to version 1.16.9, with stored Cross-site Scripting in user-facing content. The vulnerability is caused by unfiltered/pdf content handling that allows attacker-supplied data to be stored and later rendered in a web page, enabling XSS. Multiple connected sou...

Remote Code Execution (RCE)

github.com/go-gitea/gitea is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the newPullRequest function in the giteauploader.go file allowing an attacker to inject maliciously crafted script into the system...

Open redirect

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

EUVD-2022-1315

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058

CVE-2022-1058 affects Gitea (go-gitea/gitea) versions before 1.16.5. The issue is an open redirect in the login flow that can redirect users to a malicious site via redirect_to, potentially exposing sensitive information or enabling unauthorized actions. The Nuclei template and related advisories...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

CVE-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Authorization Bypass

github.com/go-gitea/gitea is vulnerable to authorization bypass. The vulnerability exists in the Auth function in pam.go due to missing checks in the pam module, allowing a malicious attacker to log in and perform unauthorized actions...