DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Gitea: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-07-13
Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen, Sitzungen zu übernehmen oder wiederzuverwenden oder einen Denial-of-Service-Zustand auszulösen.
01
beschreibt (46)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-59766US | —OT erhöht | — | ||
Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user. A user whose acc… | ||||
| CVE-2026-59765US | — | — | ||
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata | ||||
| CVE-2026-59763US | — | — | ||
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads | ||||
| CVE-2026-58511US | — | — | ||
Webhook Authorization Header Returned in Plaintext via API | ||||
| CVE-2026-58510US | — | — | ||
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private | ||||
| CVE-2026-58508US | — | — | ||
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation) | ||||
| CVE-2026-58507US | — | — | ||
Private Repository Existence Disclosure via go-get Meta Endpoint | ||||
| CVE-2026-58445US | — | — | ||
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API | ||||
| CVE-2026-58444US | —OT erhöht | — | ||
Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents | ||||
| CVE-2026-58443US | —OT erhöht | — | ||
Public-only repository tokens can update private PR head branches | ||||
| CVE-2026-58442US | — | — | ||
Repository migration SSRF via multi-answer DNS allow-list bypass | ||||
| CVE-2026-58441US | — | — | ||
SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL | ||||
| CVE-2026-58440US | —OT erhöht | — | ||
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `Delete… | ||||
| CVE-2026-58439US | —OT erhöht | — | ||
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag | ||||
| CVE-2026-58438US | —OT erhöht | — | ||
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access | ||||
| CVE-2026-58437US | — | — | ||
Repository Visibility Manipulation via Git Push Options | ||||
| CVE-2026-58436US | — | — | ||
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests | ||||
| CVE-2026-58435US | — | — | ||
Gitea LFS Deploy-Key Privilege Escalation | ||||
| CVE-2026-58434US | —OT erhöht | — | ||
Private Repository Metadata Remains Accessible After Access Revocation | ||||
| CVE-2026-58433US | —OT erhöht | — | ||
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting | ||||
20 von 46 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Gitea 1.27.0 Release vom 2026-07-13external
- GitHub Security Advisory GHSA-25gq-j9jx-43pg vom 2026-07-13external
- GitHub Security Advisory GHSA-2fcr-jfvc-vgg2 vom 2026-07-13external
- GitHub Security Advisory GHSA-46c7-w5w4-h644 vom 2026-07-13external
- GitHub Security Advisory GHSA-5ggr-2f2h-jmvm vom 2026-07-13external
- GitHub Security Advisory GHSA-66m4-5jjr-2rg5 vom 2026-07-13external
- GitHub Security Advisory GHSA-683j-3ff6-hh2x vom 2026-07-13external
- GitHub Security Advisory GHSA-6cqf-375w-639g vom 2026-07-13external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan