In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper     access controls, an attacker could assign any issue to any project in Gitea (there was no permission check     for fetching the issue). As a result, the attacker would get access to private issue titles.
    (CVE-2022-38183)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper
    access controls, an attacker could assign any issue to any project in Gitea (there was no permission check
    for fetching the issue). As a result, the attacker would get access to private issue titles.
    (CVE-2022-38183)

The remote host is affected by the vulnerability described in GLSA-202210-14 (Gitea: Multiple Vulnerabilities)

  - Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. (CVE-2022-1928)

  - An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage     will take significant time to parse. (CVE-2022-32149)

  - In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper     access controls, an attacker could assign any issue to any project in Gitea (there was no permission check     for fetching the issue). As a result, the attacker would get access to private issue titles.
    (CVE-2022-38183)

  - Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are     mishandled. (CVE-2022-42968)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
262487	Linux Distros Unpatched Vulnerability : CVE-2022-38183	Nessus	Misc.	Local	medium
422787	SCA: security update for code.gitea.io/gitea (GHSA-fhv8-m4j4-cww2)	Tenable Cloud Security	SCA Checks	Local	medium
422787	SCA: security update for code.gitea.io/gitea (GHSA-fhv8-m4j4-cww2)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
166729	GLSA-202210-14 : Gitea: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical

Detections

Analytics

CVE-2022-38183

medium

Tenable Plugins

medium

medium

medium

critical