github.com/go-gitea/gitea

5 results · Clear filters · Feed

• High 8.8
  CVE-2021-45326

  Cross Site Request Forgery in Gitea

  Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

  github.com/go-gitea/gitea gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Alpine Go
  Feb 8, 2022
• High 7.0
  CVE-2021-3382

  Buffer Overflow in gitea

  Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path.

  code.gitea.io/gitea github.com/go-gitea/gitea gitea Alpine Go
  Feb 5, 2021
• High 7.5
  CVE-2020-13246

  Denial of Service in Gitea

  An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.

  code.gitea.io/gitea github.com/go-gitea/gitea Go
  May 20, 2020
• High 8.1
  CVE-2019-11229 Public exploit EPSS 55%

  Gitea Remote Code Execution

  models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.

  github.com/go-gitea/gitea Go
  Apr 13, 2019
• High 7.5
  CVE-2019-11228

  Gitea Improper Input Validation

  repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.

  github.com/go-gitea/gitea Go
  Apr 13, 2019