Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Forgejo
CRITICAL 9.1
CVE-2023-49946
In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This al…
Fix: 1.20.5-1+
Fix from $2,300
2023-12-03
Forgejo
HIGH 7.5
CVE-2023-49947
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.
Fix: 1.20.5-1+
Fix from $1,950
2023-12-03
Forgejo
MEDIUM 5.3
CVE-2023-49948
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.
Fix: 1.20.5-1+
Fix from $1,600
2023-12-03