CVE-2018-1000803

Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email set as private. This vulnerability appears to have been fixed in 1.5.1.

• CWE-200

• https://github.com/go-gitea/gitea/pull/4664Patch, Third Party Advisory
• https://github.com/go-gitea/gitea/pull/4664/files#diff-146e0c2b5bb1ea96c9fb73d509456e57Patch, Third Party Advisory
• https://github.com/go-gitea/gitea/pull/4664Patch, Third Party Advisory
• https://github.com/go-gitea/gitea/pull/4664/files#diff-146e0c2b5bb1ea96c9fb73d509456e57Patch, Third Party Advisory

Published

Oct 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000672Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000673Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000773WordPress version 4.9.8 and earlier contains a CWE-20 Input …
• CVE-2018-1000800zephyr-rtos version 1.12.0 contains a NULL base pointer refe…
• CVE-2018-1000801okular version 18.08 and earlier contains a Directory Traver…
• CVE-2018-1000802Python Software Foundation Python (CPython) version 2.7 cont…9.8
• CVE-2018-1000804contiki-ng version 4 contains a Buffer Overflow vulnerabilit…9.8
• CVE-2018-1000805Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, …8.8
• CVE-2018-1000806Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000807Python Cryptographic Authority pyopenssl version prior to ve…8.1
• CVE-2018-1000808Python Cryptographic Authority pyopenssl version Before 17.5…
• CVE-2018-1000809privacyIDEA version 2.23.1 and earlier contains a Improper I…