Denial of Service in Gitea

GHSA-g2qx-6ghw-67hm · BIT-gitea-2020-13246 · CVE-2020-13246 · GO-2022-0830

Published Feb 15, 2022 · Modified Aug 21, 2024

Description

An issue was discovered in Gitea in which an attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-13246
WEB https://github.com/go-gitea/gitea/issues/10549
WEB https://github.com/go-gitea/gitea/pull/11438
WEB https://www.youtube.com/watch?v=DmVgADSVS88

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes