You can view Private Repositories's name from other users #10344

New Issue

GiteaMirror · 2025-11-02T09:04:53-06:00

GiteaMirror commented

2025-11-02 09:04:53 -06:00

Originally created by @Agusten7 on GitHub (Feb 25, 2023).

Description

Technically you can't see the repositories of other users but you can see the name of that repository and know that it exists.

You have to use another account and the tool 'git clone' with the URL of the repository. You can see that the private repository exists because of the response.

Maybe this could lead to something else, in a CTF, I had to know the repository's name of the other user to make my user part of that repo by injecting a XSS and then, I could grab his SSH key to log into the machine.

The machine was Extension from HackTheBox.

Gitea Version

1.20.0

Can you reproduce the bug on the Gitea demo site?

Yes

Log Gist

No response

Screenshots

Git Version

2.39.2

Operating System

No response

How are you running Gitea?

I runned it from https://try.gitea.io/

Database

None

Originally created by @Agusten7 on GitHub (Feb 25, 2023). ### Description Technically you can't see the repositories of other users but you can see the name of that repository and know that it exists. You have to use another account and the tool 'git clone' with the URL of the repository. You can see that the private repository exists because of the response. Maybe this could lead to something else, in a CTF, I had to know the repository's name of the other user to make my user part of that repo by injecting a XSS and then, I could grab his SSH key to log into the machine. The machine was Extension from HackTheBox. ### Gitea Version 1.20.0 ### Can you reproduce the bug on the Gitea demo site? Yes ### Log Gist _No response_ ### Screenshots ![paso_1](https://user-images.githubusercontent.com/119770139/221363558-7a9089fb-d203-47e6-9e7e-a90f6222664f.png) ![paso_2](https://user-images.githubusercontent.com/119770139/221363565-367b283e-8f90-4012-914b-ae60d2629577.png) ### Git Version 2.39.2 ### Operating System _No response_ ### How are you running Gitea? I runned it from https://try.gitea.io/ ### Database None

GiteaMirror added the topic/security type/bug labels 2025-11-02 09:04:53 -06:00

GiteaMirror closed this issue

2025-11-02 09:04:54 -06:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#10344