76983 matches found
CVE-2026-58511 Webhook Authorization Header Returned in Plaintext via API
Webhook Authorization Header Returned in Plaintext via API...
CVE-2026-58511
CVE-2026-58511 describes a vulnerability in Gitea where the webhook Authorization header is returned in plaintext via the API. The root cause is described in connected sources as deficiencies in access control, enabling an attacker with sufficient privileges to potentially access or infer header ...
CVE-2026-58443
CVE-2026-58443 concerns Gitea. Public-only write tokens can influence a private PR head branch via a public route, because update operations check the head repo’s normal RBAC permissions rather than validating the API token’s scope. The flow allows a POST to the update endpoint for a PR, which tr...
CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
CVE-2026-58432
CVE-2026-58432 describes Missing authorization for attachments linked to draft releases in Gitea. The API surface was updated to gate draft releases with canAccessReleaseDraft (requires write access to releases), but the web paths serving attachments (top-level /attachments, /{owner}/{repo}/attac...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58431
The CVE-2026-58431 issue concerns Gitea's public-only API token restriction not being enforced on team API routes. Technical details across connected sources show: the vulnerability affects Gitea’s API surfaces under /api/v1/teams/{id}, where a public-only token can reveal private team repository...
CVE-2026-58431 Public-only API token restriction is not enforced on team API routes
Public-only API token restriction is not enforced on team API routes...
CVE-2026-58431 Public-only API token restriction is not enforced on team API routes
Public-only API token restriction is not enforced on team API routes...
CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...
CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...
CVE-2026-58425
The provided documents describe a vulnerability in Gitea's OAuth token introspection endpoint. The bug occurs when an introspecting client calls /login/oauth/introspect with a token; the handler authenticates the client, then fetches the token's grant and reassigns the local app variable to the g...
CVE-2026-55986
Technical details about CVE-2026-55986 are not publicly available in the provided documents; no affected products, versions, or fixes are specified. Monitor for updates.
CVE-2026-55982
CVE-2026-55982 involves Gitea’s OIDC userinfo endpoint, where GET /login/oauth/userinfo accepts API tokens as Bearer credentials but does not enforce token scopes before returning identity claims. With tokens scoped only to read:misc, an attacker can retrieve identity information (e.g., email, gr...
CVE-2026-55982 OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes
OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...
CVE-2026-50105
CVE-2026-50105 affects Gitea: RSS/Atom feed handlers bypass API-token scope and public-only confinement. Root cause: feed endpoints (e.g., /{owner}/{repo}.rss, /rss/branch/*, /releases.rss, user feeds) do not enforce the repository-scoped token checks that were added for downloads, allowing token...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...