Gitea
Self-hosted Git service vulnerabilities: tokens, scopes and repository permissions.
Published work on this topic
| 2026-09-22 | CVE-2026-60004 | CVE-2026-60004 Exploit: Gitea RCE via Hook | PoC | |
| 2026-08-17 | CVE-2026-56654 | CVE-2026-56654: Gitea - Access Token Scope Escalation | PoC | |
| 2026-08-10 | CVE-2026-34966 | CVE-2026-34966: Gitea - Authenticated SSRF | PoC |
Other topics
remote code execution47authentication bypass23wordpress20php19java11authorization bypass10path traversal9privilege escalation9sql injection9code injection7insecure deserialization6denial of service6heap overflow6information disclosure6cross-site scripting6node.js5qemu5account takeover4apache tomcat4buffer overflow4gitlab4go4javascript4python4