golang-code.gitea-sdk

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2022-38183

  Gitea allowed assignment of private issues

  In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker…

  code.gitea.io/gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Go
  Aug 12, 2022
• Medium 6.1
  CVE-2021-45329

  Cross-site Scripting in Gitea

  Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.

  github.com/go-gitea/gitea gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Alpine Go
  Feb 8, 2022
• Medium 6.1
  CVE-2021-45328 Scanner template

  Open redirect in Gitea

  Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

  github.com/go-gitea/gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Go
  Feb 8, 2022
• Medium 5.3
  CVE-2021-45325

  Gitea displaying raw OpenID error in UI

  Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.

  github.com/go-gitea/gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Go
  Feb 8, 2022