2074 matches found
CVE-2021-29134
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
Directory traversal
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
CVE-2021-29134
The CVE-2021-29134 entry relates to Gitea prior to v1.13.6, where the avatar middleware is susceptible to Directory Traversal via a crafted URL. Affected component: avatar middleware in Gitea; root cause: improper handling of path components enables traversal to arbitrary files. Impact: potential...
CVE-2021-29134
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
CVE-2021-29134
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL...
Gitea < 1.16.4 Improper Authorization Vulnerability
Gitea is prone to an improper authorization vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
Gitea 路径遍历漏洞
Gitea is an open source community-driven clone of Gogs, a popular Git self-hosted service. A directory traversal vulnerability exists on Gitea that can be exploited by an attacker to allow the avatar middleware in Gitea to allow directory traversal via a crafted URL...
Arbitrary file deletion in Gitea
Description When user delete the LFS data in Gitea, the oid parameter is not been validated. The attacker can make an oid whose prefix is .... to traverse directory and delete any files on the server. Proof of Concept Create a repository on Gitea. e.g. foo/bar Send a POST request with your Gitea...
Authorization Bypass
github.com/go-gitea/gitea is vulnerable to authorization bypass. The vulnerability exists in the Auth function in pam.go due to missing checks in the pam module, allowing a malicious attacker to log in and perform unauthorized actions...
Gitea Missing Authorization vulnerability
Gitea 1.16.3 and prior is vulnerable to missing authorization. A patch is available as part of the 1.16.4 release...
GHSA-JR9C-H74F-2V28 Gitea Missing Authorization vulnerability
Gitea 1.16.3 and prior is vulnerable to missing authorization. A patch is available as part of the 1.16.4 release...
Gitea Authorization Error Vulnerability
Gitea is a project to set up a self-hosted Git service. Gitea suffers from an authorization error vulnerability that stems from PAM authentication when building and configuring Gitea, which skips checking authorization altogether and can be exploited by attackers to log into expired accounts and...
Improper Authorization in Gitea
Improper Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0905
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0905
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
Authorization
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0905
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0905 Missing Authorization in go-gitea/gitea
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
PT-2022-13517 · Gitea +1 · Gitea +1
Name of the Vulnerable Software and Affected Versions: gitea versions prior to 1.16.4 Description: The issue concerns missing authorization in the gitea repository. This allows for improper authorization, potentially leading to unauthorized access. A patch is available as part of the 1.16.4...
CVE-2022-0905
CVE-2022-0905 concerns Gitea (go-gitea/gitea) prior to 1.16.4, with a missing/Improper Authorization vulnerability in PAM/auth flow. Affected component is the Gitea login/authorization path where PAM authentication can skip authorization checks, enabling login for expired accounts or accounts wit...