CloudMap 漏洞情报库

严重CVE-2026-208962026/09/30

Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass

The official Gitea Docker image through version 1.26.2 ships with REVERSE_PROXY_TRUSTED_PROXIES set to a wildcard, causing Gitea to trust reverse-proxy authentication headers (X-WEBAUTH-USER) from any source IP instead of restricting trust to the configured reverse proxy. When reverse-proxy authentication is enabled, an unauthenticated remote attacker can impersonate any existing user, including an administrator, by sending the target username in the X-WEBAUTH-USER header.

giteaPoC 已收录

CVSS—

中危2026/06/25

Gitea < 1.21.0 - Open Redirect

Gitea before version 1.21.0 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs. The vulnerability exists in the redirect_to parameter used on the login page (/user/login). Due to improper validation of the redirect URL, an attacker can craft a malicious link that redirects authenticated users to an arbitrary external website after login.

giteaPoC 已收录

CVSS—

高危CVE-2026-277712026/06/25

Gitea Container Registry - Unauthorized Private Image Access

Gitea < 1.26.2 allows unauthenticated remote attackers to pull private container images.The /v2/token endpoint grants anonymous ghost tokens (UserID:-1) with no scope restriction.The ReqContainerAccess middleware does not check package owner visibility, so ghost users can enumerate all container repositories via /_catalog and pull any private image layer.

giteaPoC 已收录

CVSS—

中危CVE-2021-453282026/05/05

Gitea < 1.4.3 - Open Redirect

Gitea before version 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs. The vulnerability exists in the redirect_to parameter used on the login page (/user/login). Due to improper validation of the redirect URL, an attacker can craft a malicious link that redirects authenticated users to an arbitrary external website after login.

giteaPoC 已收录

CVSS—

低危2026/01/30

Gitea Public Repository - Exposure

Detected publicly accessible Gitea instances exposing repository listings and user information without authentication.

giteaPoC 已收录

CVSS—

严重CVE-2024-68862024/07/18

Gitea 1.22.0 - Cross-Site Scripting

Gitea 1.22.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows an attacker to inject malicious scripts that get stored on the server and executed in the context of another user's session.

giteaPoC 已收录

CVSS6.7EPSS 7.3%

高危2024/02/08

Gitea Public Registration Enabled

A misconfiguration in Gitea allows arbitrary users to sign up and read code hosted on the service.

giteaPoC 已收录

CVSS—

中危2023/12/21

Gitea Installer Exposure

Gitea is susceptible to the Installation page exposure due to misconfiguration.

giteaPoC 已收录

CVSS—

高危CVE-2022-307812022/05/16

CVE-2022-30781

Gitea before 1.16.7 does not escape git fetch remote.

gitea

CVSS7.5EPSS 86.2%

中危CVE-2022-10582022/03/24

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations.

giteaPoC 已收录

CVSS6.1EPSS 8.8%

高危CVE-2020-141442020/10/16

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not understood (e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the ENABLE_GIT_HOOKS line in the config file). NOTE: The vendor has indicated this is not a vulnerability and states "This is a functionality of the software that is limited to a very limited subset of accounts. If you give someone the privilege to execute arbitrary code on your server, they can execute arbitrary code on your server. We provide very clear warnings to users around this functionality and what it provides.

giteaPoC 已收录RCE

CVSS7.2EPSS 91.9%

严重2018/07/04

Gitea 1.4.0 - Remote Code Execution

Gitea 1.4.0 is vulnerable to remote code execution.

giteaPoC 已收录

CVSS—

gitea

关联漏洞