Поиск уязвимостей
Количество 9
Количество 9
ALT-PU-2022-2358
ALT-PU-2022-2358: package `gitea` update to version 1.16.9-alt1
ALT-PU-2022-2311
ALT-PU-2022-2311: package `gitea` update to version 1.16.9-alt1
CVE-2022-1928
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.
CVE-2022-1928
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gite ...
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.
CVE-2022-38183
In Gitea before 1.16.9, it was possible for users to add existing issu ...
GHSA-ph3w-2843-72mx
Stored Cross-site Scripting in gitea
GHSA-fhv8-m4j4-cww2
Gitea allowed assignment of private issues
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2358 ALT-PU-2022-2358: package `gitea` update to version 1.16.9-alt1 | CVSS3: 6.5 | больше 4 лет назад | |
| ALT-PU-2022-2311 ALT-PU-2022-2311: package `gitea` update to version 1.16.9-alt1 | CVSS3: 6.5 | больше 4 лет назад | |
 | CVE-2022-1928 Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-1928 Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gite ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-38183 In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles. | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-38183 In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles. | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-38183 In Gitea before 1.16.9, it was possible for users to add existing issu ... | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| GHSA-ph3w-2843-72mx Stored Cross-site Scripting in gitea | CVSS3: 4.4 | 1% Низкий | больше 4 лет назад |
| GHSA-fhv8-m4j4-cww2 Gitea allowed assignment of private issues | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу