Gitea Open Redirect

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-1058 · ADVISORY
• go-gitea/gitea#19175 · WEB
• go-gitea/gitea#19186 · WEB
• go-gitea/gitea commit e3d8e92 · WEB
• go-gitea/gitea · PACKAGE
• huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0d · WEB
• GitHub Advisory GHSA-4rqq-rxvc-v2rc · ADVISORY

Lỗ hổng khác của code.gitea.io/gitea

• CVE-2026-59766TRUNG BÌNH 4.3Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated wi…
• CVE-2026-60004NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
• CVE-2026-59763TRUNG BÌNH 4.3Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
• CVE-2026-58511THẤP 2.7Webhook Authorization Header Returned in Plaintext via API
• CVE-2026-58510TRUNG BÌNH 4.3GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private