1. Forum
  2. FidoNet
  3. SECURITY

  • Gitea Git Fetch Remote Code Execution

    From Security Bot@2:250/1 to All on Sat Jan 7 20:22:00 2023


    Gitea Git Fetch Remote Code Execution

    This Metasploit module exploits the Git fetch command in the Gitea
    repository migration process to allow for remote command execution on the system. This vulnerability affect Gitea versions prior to 1.16.7.

    https://packetstormsecurity.com/files/169928/gitea_git_fetch_rce.rb.txt

    Thu, 17 Nov 2022 13:31:53 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com