Information Disclosure

code.gitea.io/gitea, codeberg.org/forgejo/forgejo is vulnerable to Information Disclosure. The vulnerability is due to the UsernameSubRoute function in home.go because there are no view permissions checks. The server's response can reveal information about the existence of a private user account,...

CVE-2023-34598

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI where it's possible to include the content of several files present in the installation folder in the server's response...

Improper Input Validation

resteasy-jaxrs is vulnerble to improper input validation. The attack exists because it does not properly handle the response headers in MediaTypeHeaderDelegate.java, leading to a return of an illegal header to be integrated in the server's response...