Hackers exploit critical auth bypass in Gitea Docker image

By Bill Toulas

AI Summary

Attackers are actively exploiting a critical authentication bypass vulnerability in the official Docker image for Gitea, the self-hosted Git service, allowing impersonation of any user including administrators. Organizations running Gitea via Docker should immediately verify their image version and apply patches, as active exploitation means exposed instances are at high risk of code repository compromise.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 77.0/100

# More from July 11

1
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat The Hacker News
2
Progress urges ShareFile admins to shut down servers over “credible” threat BleepingComputer
3
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites The Hacker News
4
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks The Hacker News
5
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access The Hacker News
7
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot The Hacker News
8
Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets The Hacker News
9
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking The Hacker News
10
Microsoft Patches Defender ‘RoguePlanet’ Vulnerability SecurityWeek