61 matches found
CVE-2026-70396
Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write scope can therefore create organization-owned repositories ...
CVE-2026-73126
Gitea versions
CVE-2026-70407 Gitea organization listing token scope bypass
Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve organization metadata visible to its owner. For a site administrator's token, the response can include Limited and private organizations, bypassin...
CVE-2026-70407
The Gitea organization-list API (endpoint GET /api/v1/orgs) fails to enforce the read:organization token scope. Consequently, a token with a different category, such as read:misc , can retrieve organization metadata visible to its owner. If the token belongs to a site administrator , the response...
CVE-2026-70407 Gitea organization listing token scope bypass
Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve organization metadata visible to its owner. For a site administrator's token, the response can include Limited and private organizations, bypassin...
CVE-2026-70407
Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve organization metadata visible to its owner. For a site administrator's token, the response can include Limited and private organizations, bypassin...
CVE-2026-70396 Gitea organization repository creation token scope bypass
Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write scope can therefore create organization-owned repositories ...
CVE-2026-70396
The Gitea organization repository-creation API suffers from an Incorrect Authorization vulnerability (CWE-863 ). While the API requires the write:organization scope, it fails to enforce the write:repository token scope required by other repository-creation routes. This allows a personal access to...
CVE-2026-70396 Gitea organization repository creation token scope bypass
Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write scope can therefore create organization-owned repositories ...
CVE-2026-70396
Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write scope can therefore create organization-owned repositories ...
PT-2026-114277
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw allows a token with write:user scope to register an attacker-controlled SSH public key on the account of the token owner. API requests signed with the corresponding private key...
EUVD-2026-78654
Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts...
Duplicate Advisory: Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9rg3-v78m-26q8. This link is maintained to preserve external references. Original Description Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fail...
GHSA-PHPH-C358-5MWM Duplicate Advisory: Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9rg3-v78m-26q8. This link is maintained to preserve external references. Original Description Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fail...
CVE-2026-91983
Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited token scopes can use the expand parameter to access restricted data like comments, reactions, and time entries without...
CVE-2026-91983
Vikunja before 2.6.0 contains an API token scope bypass in its task read endpoints. The root cause is that authorization logic fails to inspect query string parameters , allowing attackers holding limited-scope tokens to leverage the expand parameter to access restricted data such as comments, re...
CVE-2026-91983: Incorrect Authorization
Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited token scopes can use the expand parameter to access restricted data like comments, reactions, and time entries without...
PT-2026-92097
Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description An API token scope bypass exists in task read endpoints because the authorization process does not inspect query string parameters. An attacker with limited token scopes can utilize the expand...
FreeBSD : gitea -- Multiple vulnerabilities (2f3568eb-999e-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2f3568eb-999e-11f1-a655-3497f65b111b advisory. Gitea reports This release contains fixes for 45 security issues, including privilege...