4 matches found
CVE-2026-60004
CVE-2026-60004 — RCE в Gitea через Git-хук Diffpatch Инъекция хука в bare-клон → post-index-change → Выполнение произвольных команд Обзор CVE-2026-60004 — критическая CVSS 9.8 уязвимость удалённого выполнения кода без аутентификации в самохостинговых Git-платформах Gitea и Forgejo , затрагивающая...
Gitea: Remote Code Execution via diffpatch Git Hook Installation
Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...
GHSA-RCR6-4JQH-J84M Gitea: Remote Code Execution via diffpatch Git Hook Installation
Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...
