The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea allows a hacker to disclose protected information.

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the UpdateIssueAttachments() function in the models/issues/issue_update.go file and the UpdateCommentAttachments() function in the models/issues/comment.go files of the Git repository management system Gitea allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the UpdateIssueAttachments function in the models/issues/issueupdate.go file and the UpdateCommentAttachments function in the models/issues/comment.go files of the Git repository management system Gitea is related to the use of names with incorrect references. Exploiting this...

The vulnerability of the AddPackageTag() function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea allows a hacker to cause a service failure.

The vulnerability of the AddPackageTag function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability lies in the `getStarredRepos()` function in the `routers/api/v1/user/star.go` file and the `ListMyTrackedTimes()` function in the `routers/api/v1/repo/issue_tracked_time.go` file of the Git repository management system Gitea. This vulnerability allows a malicious individual to disclose protected information.

The vulnerability of the getStarredRepos function in the routers/api/v1/user/star.go file and the ListMyTrackedTimes function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability...

The vulnerability lies in the CreateAccessToken() function in the routers/api/v1/user/app.go file, and the reqBasicOrRevProxyAuth() function in the routers/api/v1/api.go file of the Git repository management system Gitea. This vulnerability allows a hacker to escalate their privileges.

The vulnerability of the CreateAccessToken function in the routers/api/v1/user/app.go file and the reqBasicOrRevProxyAuth function in the routers/api/v1/api.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a...

The vulnerability of the `updateRepository()` function in the `services/repository/repository.go` file of the Git repository management system Gitea allows a hacker to disclose protected information.

The vulnerability of the updateRepository function in the services/repository/repository.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...

The vulnerability of the final point /login/oauth/userinfo of the Git repository management system Gitea, which allows a hacker to compromise the confidentiality and integrity of the protected information

The vulnerability of the final point /login/oauth/userinfo of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerabilities of the `Action.ListWorkflowRuns()` and `Action.ListWorkflowJobs()` methods in the routers/api/v1/org/action.go file of the Git repository management system Gitea allow attackers to disclose sensitive information that should be protected.

The vulnerabilities of the Action.ListWorkflowRuns and Action.ListWorkflowJobs methods in the routers/api/v1/org/action.go file of the Git repository management system Gitea are related to insufficient resource control during its existence. Exploiting these vulnerabilities could allow a malicious...

The vulnerability of the parseKeyString() function in the models/asymkey/ssh_key_parse.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the parseKeyString function in the models/asymkey/sshkeyparse.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the CheckAuthToken() function in the services/auth/auth_token.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the CheckAuthToken function in the services/auth/authtoken.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

The vulnerability of the GetActionsUserRepoPermission() function in the models/perm/access/repo_permission.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the GetActionsUserRepoPermission function in the models/perm/access/repopermission.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the oauth2UpdateAvatarIfNeed() function of the routers/web/auth/oauth.go file in the Git repository management system Gitea allows a hacker to disclose protected information.

The vulnerability of the oauth2UpdateAvatarIfNeed function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the ChangeTargetBranch() function in the services/pull/pull.go file of the Git repository management system Gitea allows a attacker to increase their privileges or bypass security restrictions.

The vulnerability of the ChangeTargetBranch function in the services/pull/pull.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges or circumvent security restrictio...

The vulnerability of the Clone() function in the modules/git/repo.go file of the Git repository management tool Gitea allows a attacker to perform an SSRF attack.

The vulnerability of the Clone function in the modules/git/repo.go file of the Git repository management tool Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to perform an SSRF attack...

The vulnerability of the ListMembers() function in the routers/api/v1/org/member.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the ListMembers function in the routers/api/v1/org/member.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the endpoints /api/v1/user/starred and /api/v1/user/subscriptions of the Git repository management system Gitea, which allows a perpetrator to disclose protected information

The vulnerability of the /api/v1/user/starred and /api/v1/user/subscriptions endpoints of the Git repository management system Gitea is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the httpBase() function in the routers/web/repo/githttp.go file and the EarlyResponseForGoGetMeta() function in the services/context/repo.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information.

The vulnerability of the httpBase function in the routers/web/repo/githttp.go file and the EarlyResponseForGoGetMeta function in the services/context/repo.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a...

The vulnerability of the IntrospectOAuth() function in the routers/web/auth/oauth2_provider.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the IntrospectOAuth function in the routers/web/auth/oauth2provider.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Vulnerability of the endpoint /api/v1/teams/{teamid} of the Git repository management system Gitea, which allows a hacker to expose protected information

The vulnerability of the endpoint /api/v1/teams/teamid of the Gitea Git repository management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the Git repository management system Gitea’s path "{owner}/{repo}", which allows attackers to expose protected information.

The vulnerability of the Git repository management system Gitea’s path/owner/repo is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to expose the protected information...