Gitea 28.1.0 Draft Release Attachment Metadata Disclosure

Gitea versions 1.22.0 through 28.1.0 contain an information disclosure where creating a draft release can return metadata for unlinked attachments from private repositories. https://packetstorm.news/download/238569...

Exploit for CVE-2026-110311

CVE-2026-110311 · Gitea Security Lab A local reproduction o...

CVE-2026-110311

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311

Creating a draft release through the API returned an "assets" list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, si...

EUVD-2026-103989

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311 Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311 Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311 Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311

The Gitea platform is vulnerable to an information disclosure flaw when creating a draft release via the API. The application returns an assets list built from a release lacking a unique ID, causing it to match every attachment not linked to a release. Consequently, an attacker with permissions t...

PT-2026-117153

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Creating a draft release through the API returns an assets list generated from a release lacking an ID. This causes the system to match every attachment not link...

Gitea information leakage vulnerability

The Gitea version from 1.22.0 to 28.1.0 has an information leakage vulnerability. This vulnerability arises from the assets list returned during the creation of draft releases via API. These assets are built from releases without IDs, which matches all attachments not associated with any releases...

SUSE CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

GO-2026-6070 Gitea: draft release attachment disclosure via missing web authorization in gitea.dev

Gitea: draft release attachment disclosure via missing web authorization in gitea.dev...

PT-2026-65368

Gitea: draft release attachment disclosure via missing web authorization in gitea.dev...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to insufficient permission checks in the draft release process. An attacker can access sensitive draft release data or attachments by bypassing required write permissions. Remediation Upgrade...

CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-27660 Gitea draft releases use insufficient permission checks

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

EUVD-2026-41633

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...