Hackers Exploit Critical Gitea Vulnerability in Code Injection Attacks, CISA Warns
A critical-severity vulnerability in Gitea, the self-hosted Git service, is being actively exploited by attackers in code injection attacks, according to a warning from the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw allows remote threat actors to inject malicious code into repositories, potentially compromising source code, CI/CD pipelines, and developer credentials. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog, signaling an urgent need for organizations to apply patches.
