As cited
Copy frozen at (site build).
vulnerabilities
Hackers now exploit critical Gitea flaw in code injection attacks
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Hackers now exploit critical Gitea flaw in code injection attacks
Attackers are actively exploiting a critical-severity vulnerability in Gitea, a self-hosted Git service, according to the Cybersecurity and Infrastructure Security Agency (CISA). The vulnerability enables code injection attacks against organizations running affected Gitea instances.
Why it matters: Any organization running Gitea should prioritize patching immediately, as exploitation is already active in the wild and code injection could lead to remote code execution (RCE) and compromise of source code repositories.
- Source published
- First seen by Cybersecurity Tracker