2075 matches found
GHSA-FHV8-M4J4-CWW2 Gitea allowed assignment of private issues
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Gitea allowed assignment of private issues
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Gitea allowed assignment of private issues
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
UBUNTU-CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Improper access control
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
Gitea 安全漏洞
Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.16.9 that stems from improper access control. An attacker exploiting this vulnerability could assign any issue to any project in Gitea...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea there was no permission check for fetching the issue. As a result, the attacker would get access to private issue title...
CVE-2022-38183
CVE-2022-38183 affects Gitea before 1.16.9. The issue arises from improper access controls that allowed a user to add existing issues to any project without a proper permission check when fetching the issue, enabling an attacker to assign any issue to any project and access private issue titles. ...
FreeBSD : gitea -- multiple issues (8bec3994-104d-11ed-a7ac-0800273f11ea)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8bec3994-104d-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit...
FreeBSD : gitea -- multiple issues (df29c391-1046-11ed-a7ac-0800273f11ea)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the df29c391-1046-11ed-a7ac-0800273f11ea advisory. - The Gitea team reports: Add write check for creating Commit status Check for permission when fetching...
gitea -- multiple issues
The Gitea team reports: Use git.HOMEPATH for Git HOME directory Add write check for creating Commit status Remove deprecated SSH ciphers from default...
gitea -- multiple issues
The Gitea team reports: Add write check for creating Commit status Check for permission when fetching user controlled issues...
Gitea < 1.16.9 XSS Vulnerability
Gitea is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Cross-site Scripting (XSS)
github.com/go-gitea/gitea is vulnerable to cross-site scripting. Lack of proper handling of MIME type of SVG images allows an attacker to inject and execute malicious script through it...
Gitea Cross-Site Scripting Vulnerability (CNVD-2022-66680)
Gitea is a lightweight Go-based git service developed by the Gitea community. cross-site scripting vulnerabilities exist in versions of Gitea prior to 1.16.9. No detailed vulnerability details are currently available...