Duplicated and obsolete email change on user profile page #6223

New Issue

GiteaMirror · 2025-11-02T06:48:57-06:00

GiteaMirror commented

2025-11-02 06:48:57 -06:00

Originally created by @WildCryptoFox on GitHub (Oct 28, 2020).

REDACTED. See email to security@gitea.io.

Originally created by @WildCryptoFox on GitHub (Oct 28, 2020). REDACTED. See email to security@gitea.io.

GiteaMirror added the topic/security type/bug labels 2025-11-02 06:48:57 -06:00

GiteaMirror closed this issue

2025-11-02 06:48:57 -06:00

GiteaMirror commented

2025-11-02 06:48:58 -06:00

@ashimokawa commented on GitHub (Oct 28, 2020):

What we did on codeberg.org is to just forbid to change the email there, it must be done in the account settings and then the primary email can be switched after confirming. So we just patched out the feature to do it in the settings directly.

We did not open an issue here but contacted you in January via the official way of reporting security problems.

@ashimokawa commented on GitHub (Oct 28, 2020): What we did on codeberg.org is to just forbid to change the email there, it must be done in the account settings and then the primary email can be switched after confirming. So we just patched out the feature to do it in the settings directly. We did not open an issue here but contacted you in January via the official way of reporting security problems.

GiteaMirror commented

2025-11-02 06:48:58 -06:00

@WildCryptoFox commented on GitHub (Oct 28, 2020):

(Whoops.) Thank you @ashimokawa for the information (and hint there is an official channel for this which I admit I should have checked for...)

@WildCryptoFox commented on GitHub (Oct 28, 2020): (Whoops.) Thank you @ashimokawa for the information (and hint there is an official channel for this which I admit I should have checked for...)

GiteaMirror commented

2025-11-02 06:48:58 -06:00

@WildCryptoFox commented on GitHub (Oct 28, 2020):

(Redacted and history deleted. Too late... but hopefully this will be fixed soon. At least the issue is relatively minor.)

@WildCryptoFox commented on GitHub (Oct 28, 2020): (Redacted and history deleted. Too late... but hopefully this will be fixed soon. At least the issue is relatively minor.)

GiteaMirror commented

2025-11-02 06:48:58 -06:00

@zeripath commented on GitHub (Oct 28, 2020):

Do you know if the API is similarly affected?

@zeripath commented on GitHub (Oct 28, 2020): Do you know if the API is similarly affected?

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#6223