01 Record

CVE-2026-57894

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

HighPUBLISHEDCNA: Gitea

Base score8.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

02 Description

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

Published: 2026-08-13 16:44Z1 DAY AGO
Last updated: 2026-08-14 17:36Z1 HR AGO
Reserved: 2026-07-08
Assigning CNA: Gitea
Record state: PUBLISHED
Severity: High (CVSS 8.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weaknesses: CWE-918
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 81a54abd320ade829fd4207cd06d56d12908d65b2ed774c6c1b4af1a50ebe358

VendorProductVersionsPlatforms