Description (CNA)
When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported `max_response_items` as `0` made these loops run indefinitely and grow server memory until it was exhausted. Any user who can migrate repositories could point a migration at a server they control and cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Gitea / Gitea | affected 0 through 28.0.0 |
CWE
CWE-400, CWE-835
References
- https://github.com/go-gitea/gitea/security/advisories/GHSA-jj5r-9rpc-8h6h
- https://github.com/go-gitea/gitea/pull/39501
- https://github.com/go-gitea/gitea/pull/39507
- https://blog.gitea.com/release-of-28.1.0/
- https://github.com/go-gitea/gitea/releases/tag/v28.1.0
ADP enrichment
No English description supplied.
No references supplied.