Vulnerabilities > Gitea

DATE CVE VULNERABILITY TITLE RISK
2023-08-07 CVE-2022-38795 Unspecified vulnerability in Gitea
In Gitea through 1.17.1, repo cloning can occur in the migration function.
network
low complexity
gitea
6.5
2023-07-05 CVE-2023-3515 Open Redirect vulnerability in Gitea
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.
network
high complexity
gitea CWE-601
4.4
2022-12-12 CVE-2022-46685 Cleartext Transmission of Sensitive Information vulnerability in Gitea
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
network
low complexity
gitea CWE-319
4.3
2022-10-16 CVE-2022-42968 Argument Injection or Modification vulnerability in Gitea
Gitea before 1.17.3 does not sanitize and escape refs in the git backend.
network
low complexity
gitea CWE-88
critical
9.8
2022-08-12 CVE-2022-38183 Missing Authorization vulnerability in Gitea
In Gitea before 1.16.9, it was possible for users to add existing issues to projects.
network
low complexity
gitea CWE-862
6.5
2022-05-29 CVE-2022-1928 Cross-site Scripting vulnerability in Gitea
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.
network
low complexity
gitea CWE-79
5.4
2022-05-16 CVE-2022-30781 Improper Encoding or Escaping of Output vulnerability in Gitea
Gitea before 1.16.7 does not escape git fetch remote.
network
low complexity
gitea CWE-116
7.5
2022-05-03 CVE-2022-27313 Unspecified vulnerability in Gitea 1.16.3
An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.
network
low complexity
gitea
5.0
2022-03-24 CVE-2022-1058 Open Redirect vulnerability in Gitea
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.
network
gitea CWE-601
5.8
2022-03-15 CVE-2021-29134 Path Traversal vulnerability in Gitea
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.
network
low complexity
gitea CWE-22
5.0