Gitea v1.25.5: AuthBypass/PathEncodingBypass in Permissions and Redirects

Vulnerability Overview In Gitea version 1.25.5, several security-related issues exist, primarily including: 1. Toolchain Update: Updated the Go toolchain to version 1.25.6. 2. Path Encoding Bypass: Prevented redirect bypasses via backslash-encoded paths. 3. Permission Check Issues: Fixed multiple permission check-related vulnerabilities, including: - Permission check for retrieving draft releases - Bug allowing users to change the primary email address of other users - OAuth2 authorization code expiration and reuse handling - Validation constraints for repository creation fields - Permission checks for updating pull request branches or rebasing - Permission checks for the time tracking list - Time tracking issue IDs - Path parsing - Bug related to dumping release assets - Organization permission API visibility checks - Forward protocol handling - Git grep search timeout - OAuth2 s256 Impact Scope These vulnerabilities may affect all users running Gitea version 1.25.5, particularly those involving permission management and data security operations. Remediation 1. Toolchain Update: Update the Go toolchain to version 1.25.6. 2. Path Encoding Bypass: Prevent redirect bypasses via backslash-encoded paths. 3. Permission Check Issues: Fixed multiple permission check-related vulnerabilities, specifically including: - Permission check for retrieving draft releases - Bug allowing users to change the primary email address of other users - OAuth2 authorization code expiration and reuse handling - Validation constraints for repository creation fields - Permission checks for updating pull request branches or rebasing - Permission checks for the time tracking list - Time tracking issue IDs - Path parsing - Bug related to dumping release assets - Organization permission API visibility checks - Forward protocol handling - Git grep search timeout - OAuth2 s256 POC Code or Exploit Code No specific POC code or exploit code was provided in the page. Summary Several security-related issues exist in Gitea version 1.25.5, primarily involving vulnerabilities in permission management and data security. Users are advised to upgrade to the latest version as soon as possible to address these issues.

Goal Reached Thanks to every supporter — we hit 100%!

Gitea v1.25.5: AuthBypass/PathEncodingBypass in Permissions and Redirects

More from this source