Gitea Disclosure Information Disclosure

The vulnerability of the getStarredRepos function in the routers/api/v1/user/star.go file and the ListMyTrackedTimes function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the getStarredRepos and ListMyTrackedTimes functions. An attacker can access private repository metadata and private issue titles after their access has been revoked by sending requests to the affected API...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the getStarredRepos and ListMyTrackedTimes functions. An attacker can access private repository metadata and private issue titles after their access has been revoked by sending requests to the affected API...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the getStarredRepos and ListMyTrackedTimes functions. An attacker can access private repository metadata and private issue titles after their access has been revoked by sending requests to the affected API...