Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /api/v1/user endpoint returning different responses for failed authentication attempts depending on whether a username exists. An attacker can enumerate valid usernames by analyzing the variations in...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /api/v1/user endpoint returning different responses for failed authentication attempts depending on whether a username exists. An attacker can enumerate valid usernames by analyzing the variations in...

EUVD-2023-2029

Malicious code in bioql PyPI...

CVE-2023-3515

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

GO-2022-0862 Gitea Improper Input Validation in github.com/go-gitea/gitea

Gitea Improper Input Validation in github.com/go-gitea/gitea...

GO-2022-0846 Gitea Remote Code Execution in github.com/go-gitea/gitea

Gitea Remote Code Execution in github.com/go-gitea/gitea...

GO-2022-0579 Open redirect in Gitea in github.com/go-gitea/gitea

Open redirect in Gitea in github.com/go-gitea/gitea...

GO-2022-0314 Cross-site Scripting in Gitea in github.com/go-gitea/gitea

Cross-site Scripting in Gitea in github.com/go-gitea/gitea...

GO-2022-0309 Cross Site Request Forgery in Gitea in github.com/go-gitea/gitea

Cross Site Request Forgery in Gitea in github.com/go-gitea/gitea...

BIT-GITEA-2022-0905 Missing Authorization in go-gitea/gitea

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

Open Redirect

github.com/go-gitea/gitea is vulnerable to Open Redirect. The vulnerability exists due to improper path sanitization in the RedirectToFirst function, which allows an attacker to pass a crafted POST request, redirecting the victim to a malicious site...

CVE-2023-3515

CVE-2023-3515 is an Open Redirect in go-gitea/gitea prior to 1.19.4. The issue involves a redirect mechanism (redirect_to) that can cause a 302 redirect to an untrusted site, enabling potential user redirection to a malicious domain. Affected product: Gitea (Git service) with the vulnerable path ...

CVE-2023-3515 Open Redirect in go-gitea/gitea

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

CVE-2023-3515 Open Redirect in go-gitea/gitea

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

Stored Cross-site Scripting in gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9 via unfiltered pdfs...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...

CVE-2022-1928 Cross-site Scripting (XSS) - Stored in go-gitea/gitea

Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9...