Privilege Escalation

🗓️ 25 Nov 2020 11:35:57Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

gitea privilege escalation via ParseRemoteAddr in repo_form.g

Reporter	Title	Published	Views	Family All 10
Prion	Path traversal	24 Nov 202001:15	–	prion
OSV	Improper Access Control in Gitea	24 Apr 202420:56	–	osv
OSV	CVE-2020-28991	24 Nov 202001:15	–	osv
OSV	BIT-gitea-2020-28991	6 Mar 202410:55	–	osv
CVE	CVE-2020-28991	24 Nov 202001:15	–	cve
NVD	CVE-2020-28991	24 Nov 202001:15	–	nvd
OpenVAS	Gitea 0.9.99 < 1.12.6 RCE Vulnerability	10 Feb 202100:00	–	openvas
Cvelist	CVE-2020-28991	24 Nov 202000:29	–	cvelist
ArchLinux	[ASA-202011-26] gitea: insufficient validation	26 Nov 202000:00	–	archlinux
Github Security Blog	Improper Access Control in Gitea	24 Apr 202420:56	–	github

Vulners

Node

gitea github.com\/go-gitea\/giteaRange≤1.12.5

Source	Link
github	www.github.com/go-gitea/gitea/pull/13525
github	www.github.com/go-gitea/gitea/releases/tag/v1.12.6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Nov 2020 11:57Current

4.6Medium risk

Vulners AI Score4.6

EPSS0.002

gitea vulnerability tcp port parseremoteaddr escalation privilege