63 matches found
gitea-public-only-pat-org
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-public-only-pat-org gitea-public-only-pat-org Gitea 1.27.3 - Gitea public-only on a PAT is supposed to be the promise that the token cannot touch private resources. POST /user/repos has rejectPublicOnly. POST...
CVE-2026-73126
Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request. A token lacking read:repository, or restricted to public repositories, can retrieve the latest workflow status of a private repository...
CVE-2026-70406
Gitea is vulnerable to a private comparison disclosure due to the shared comparison helper omitting a necessary token repository-access check. An attacker using a public-only token with read:repository scope can bypass the token's public-only restriction by routing a comparison or pull request cr...
CVE-2026-70406 Gitea private comparison disclosure with public-only tokens
Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head...
CVE-2026-70406 Gitea private comparison disclosure with public-only tokens
Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head...
CVE-2026-70400 Gitea private migration creation with public-only tokens
Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended to operate only on public resources can create a private repository and migration task under the authorizing account or an organization where that...
CVE-2026-70400
Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended to operate only on public resources can create a private repository and migration task under the authorizing account or an organization where that...
CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-24791
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-58431: Incorrect Authorization
Public-only API token restriction is not enforced on team API routes...
CVE-2026-58443: Incorrect Authorization
Public-only repository tokens can update private PR head branches...
GO-2026-6059 Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev
Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev...
Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Summary A personal access token restricted with the public-only scope can still retrieve private organization membership and organization permission details for its own account through organization-listing endpoints. This bypass breaks the intended guarantee that such tokens are limited to public...
GHSA-FQ2P-5P22-8G6J Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Summary A personal access token restricted with the public-only scope can still retrieve private organization membership and organization permission details for its own account through organization-listing endpoints. This bypass breaks the intended guarantee that such tokens are limited to public...