Gitea version 1.24.0 is susceptible to HTML Injection and potentially Reflected Cross-Site Scripting (XSS) through the 'description' parameter on the user settings page. The lack of proper sanitization of user-supplied HTML content allows malicious scripts to be executed in the user's browser, leading to potential attacks. An attacker can inject malicious HTML or JavaScript code into their profile description, which gets executed when saved, demonstrating the presence of the vulnerability.
Gitea version 1.22.0 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This security flaw enables a malicious actor to insert harmful scripts that are stored on the server and run within the context of another user's session.
This exploit allows an attacker to execute arbitrary code remotely on a Gitea 1.4.0 server without authentication. The attacker can create a fake OID for the app.ini file and trigger the execution of arbitrary commands.
Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to authenticated remote code execution.
This module exploits Git fetch command in Gitea repository migration process that leads to a remote command execution on the system. This vulnerability affects Gitea before version 1.16.7.
Gitea is vulnerable to authenticated remote code execution. An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable server. This vulnerability affects Gitea versions >= 1.1.0 to <= 1.12.5. The vulnerability is due to the lack of proper input validation in the 'user/settings/ssh' endpoint. An attacker can exploit this vulnerability to execute arbitrary code on the vulnerable server.
Services By CQR