Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
Summary
A critical vulnerability in Gitea, a self-hosted Git platform, allows unauthenticated attackers to read server files. This flaw, present in versions 1.22.1 through 1.27.0, can be exploited using crafted Org-mode markup in a public repository, granting attackers access to any file the service account can read. The issue has been fixed in Gitea 1.27.1.
IFF Assessment
This vulnerability allows unauthenticated attackers to read sensitive server files, posing a significant risk to data confidentiality and system integrity.
Severity
The vulnerability has a critical CVSS score of 9.8 due to its high impact, allowing unauthenticated attackers to read any file accessible by the service account, representing a severe confidentiality breach.
Defender Context
This vulnerability highlights the importance of timely patching for self-hosted services like Gitea. Defenders should prioritize updating Gitea to the latest version (1.27.1) to mitigate this risk. Organizations should also review file access permissions for service accounts to limit the potential impact of any future file-reading vulnerabilities.