Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen, Sitzungen zu übernehmen oder wiederzuverwenden oder einen Denial-of-Service-Zustand auszulösen.
[UPDATE] [hoch] Gitea: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-15 13:11 UTC
- Importiert: 2026-10-16 09:36 UTC
- CVSS: 9.8
- Quelle-ID:
cert_bund - uid_hash:
0e0757edc625d5ce69d06f00522dfbc53cd100a7d452f3c727ce9b7a714885a0
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
LOW |
3.1 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.1 |
2026-08-13 |
|||
CRITICAL |
9.8 |
LOW |
2.7 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
5.4 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
8.1 |
2026-08-13 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.6 |
2026-08-13 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.2 |
2026-08-13 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.1 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.2 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
5.9 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
8.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.7 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.1 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.4 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-08-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.9 |
2026-08-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
4.3 |
2026-08-13 |
|||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-08-13 |
|||
CRITICAL |
9.8 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
openSUSE Security Update OPENSUSE-SU-2026:21551-1 vom 2026-08-12 |
EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |