Skip to content
OpenAdvisories

Package · Go

code.gitea.io/gitea

123 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

123 results · Feed

  • Medium 6.5
    CVE-2019-1000002

    Gitea Arbitrary File Delete Vulnerability

    Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the atta…

    code.gitea.io/gitea Go
  • Critical 9.8
    CVE-2018-18926

    Gitea Remote Code Execution (RCE)

    Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.

    code.gitea.io/gitea golang-code.gitea-git Ubuntu Go
  • High 8.6
    CVE-2018-15192

    Gogs and Gitea SSRF Vulnerability

    An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.

    code.gitea.io/gitea gogs.io/gogs Go