domain-protect

domain-protect Domain Protect est maintenant un projet OWASP déplacé vers: github.com/domain-protect/domain-protect...

CVE-2026-104633

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported maxresponseitems as 0 made these loops run indefinitely and grow server memory until it was exhausted. Any user who...

CVE-2026-104633 Gitea migration memory exhaustion from zero page size

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported maxresponseitems as 0 made these loops run indefinitely and grow server memory until it was exhausted. Any user who...

CVE-2026-104633

The Gitea platform is vulnerable to a denial of service during repository migration from another Gitea instance. The root cause is an uncontrolled resource consumption (CWE-400) where the application uses the source server's max_response_items setting to determine pagination limits. If a source s...

CVE-2026-70357 Gitea repository migration SSRF through DNS rebinding

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when connecting. An attacker who can start a migration and control the destination's DNS can change the address between...

CVE-2026-70357 Gitea repository migration SSRF through DNS rebinding

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when connecting. An attacker who can start a migration and control the destination's DNS can change the address between...

CVE-2026-70357

The Gitea repository migration functionality is vulnerable to a Server-Side Request Forgery (SSRF) via DNS rebinding . While Gitea validates the migration hostname against network allow and block lists, the Git subprocess independently resolves the hostname during the Git clone operation . An att...

CVE-2026-101029

The Gitea repository migration and pull mirror features are vulnerable to a Server-Side Request Forgery (SSRF) due to a Time-of-check Time-of-use (TOCTOU) race condition. The egress checks can be bypassed by using a hostname that returns multiple DNS answers , as the address validated by the syst...

cve-2026-22874-gitea-ssrf-allowlist

CVE-2026-22874 — Неполная защита от SSRF в списке разрешений вебхуков и миграций Gitea Технический разбор и ссылки по CVE-2026-22874 GHSA-2r5c-gw76-rh3w: неполный список разрешений SSRF в доставке вебхуков и миграции репозиториев Gitea, исправленный в Gitea 1.26.3. Я независимо сообщил об этом...

raider

DÉPÔT OBSOLÈTE Raider est devenu un projet OWASP, donc le développement sera déplacé vers leur compte Github...

CVE-2022-30781

🍵 CVE-2022-30781 Эксплойт удалённого выполнения команд при миграции репозитория Gitea. Как использовать 1. Запустите HTTP-сервер для раздачи файлов из этого репозитория. 2. Отредактируйте команду, которая будет выполнена, в api/v1/repos/e99/exp/pulls/1/index.html L96. 3. Мигрируйте удалённый...

CVE-2026-82556

A flaw was found in Forgejo. A remote attacker could exploit a server-side request forgery SSRF vulnerability by manipulating the net.LookupIP function within the Repository Migration Handler. This could allow the attacker to force the server to make requests to arbitrary network resources,...

CVE-2026-82556

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82556

Forgejo up to 15.0.4 is affected by a server-side request forgery (SSRF) vulnerability in the Repository Migration Handler . The root cause is the use of net.LookupIP in services/migrations/allowlist/is_migrate_allowed.go, where a remote attacker with low privileges can perform a manipulation to ...

CVE-2026-82556 Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

EUVD-2026-68278

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82556 Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82556: Server-Side Request Forgery (SSRF)

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

PT-2026-83623

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is migrate allowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be...

CVE-2026-69104

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue...