gitea

6 results · Clear filters · Feed

• High 7.5
  CVE-2022-32149

  Denial of service via crafted Accept-Language header in golang.org/x/text/language

  An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

  golang.org/x/text golang.org/x/text/language gitea golang-golang-x-text Debian Ubuntu Alpine Go
  Oct 14, 2022
• High 7.5
  CVE-2022-30781 Public exploit EPSS 88%

  Shell command injection in gitea

  Gitea before 1.16.7 does not escape git fetch remote.

  code.gitea.io/gitea gitea Alpine Go
  May 16, 2022
• High 7.5
  CVE-2022-27313

  Arbitrary file deletion in gitea

  An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.

  code.gitea.io/gitea gitea Alpine Go
  May 3, 2022
• High 8.8
  CVE-2021-45326

  Cross Site Request Forgery in Gitea

  Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

  github.com/go-gitea/gitea gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Alpine Go
  Feb 8, 2022
• High 7.0
  CVE-2021-3382

  Buffer Overflow in gitea

  Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path.

  code.gitea.io/gitea github.com/go-gitea/gitea gitea Alpine Go
  Feb 5, 2021
• High 7.5
  CVE-2020-26160 Public exploit

  Authorization bypass in github.com/dgrijalva/jwt-go

  jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if th…

  gitea golang-github-coreos-discovery-etcd-io github.com/dgrijalva/jwt-go/v4 golang-github-dgrijalva-jwt-go Debian Ubuntu Alpine Go
  Sep 30, 2020