Exposición de Gitea

Development
135
score de exposición
47
sitios usan
1
en explotación
10
críticos

CVEs

111 resultados
CVE-2026-116296MEDIUMGitea archived repository release, milestone and label modificationEPSS 0.3%CVE-2026-89430HIGHGitea push mirror SSRF and forced writes to internal Git hostsEPSS 0.3%CVE-2026-66874MEDIUMGitea required Actions check bypass through skipped workflowsEPSS 0.3%CVE-2025-68941MEDIUMGitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.EPSS 0.3%CVE-2026-97208MEDIUMGitea push mirror API bypass of DISABLE_NEW_PUSH policyEPSS 0.3%CVE-2026-110324MEDIUMGitea private profile information disclosure through POST requestEPSS 0.3%CVE-2026-103504HIGHGitea API team demotion not applied to unit permissionsEPSS 0.3%CVE-2026-78231MEDIUMGitea blind SSRF through OpenID assertion verificationEPSS 0.3%CVE-2026-104636HIGHGitea SSRF through Git HTTP redirects in mirrors and fetchesEPSS 0.3%CVE-2025-68946MEDIUMIn Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.EPSS 0.2%CVE-2025-68942MEDIUMGitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text.EPSS 0.2%CVE-2026-96589MEDIUMGitea private repository access retained after rejected transferEPSS 0.2%CVE-2026-107686MEDIUMGitea reactions accepted on locked issues and commentsEPSS 0.2%CVE-2026-101027HIGHGitea migration SSRF through ALLOWED_DOMAINS address check bypassEPSS 0.2%CVE-2026-96594MEDIUMGitea repository media API stored XSSEPSS 0.2%CVE-2026-110311MEDIUMGitea draft release creation disclosing attachment metadataEPSS 0.2%CVE-2026-103670HIGHGitea trusted workflow cancellation by unapproved fork runsEPSS 0.2%CVE-2026-79960HIGHGitea deploy key pushes acting as the repository ownerEPSS 0.2%CVE-2026-117677—Gitea Helm chart upload decompression denial of serviceEPSS 0.2%CVE-2026-117649LOWGitea private issue disclosure through issue dependency timeline eventsEPSS 0.2%