gitea-public-repo-exposure: Gitea Public Repository - Exposure

id: gitea-public-repo-exposure

info:
  name: Gitea Public Repository - Exposure
  author: theamanrawat
  severity: low
  description: |
    Detected publicly accessible Gitea instances exposing repository listings and user information without authentication.
  reference:
    - https://gitea.io/
    - https://docs.gitea.io/en-us/
  metadata:
    shodan-query: http.title:"Gitea"
    fofa-query: title="Gitea"
  tags: gitea,exposure,misconfig,git,vuln

flow: http(1) && http(2)

http:
  - method: GET
    path:
      - "{{BaseURL}}/explore/repos"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(to_lower(body), "explore repositories", "gitea")'
        condition: and
        internal: true

  - method: GET
    path:
      - "{{BaseURL}}/api/v1/repos/search?q=&limit=50"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "\"data\":", "\"clone_url\":", "\"full_name\":")'
        condition: and
# digest: 490a004630440220389ba91c8854022c6a49fd092b913cd833639222fc5642192592cead199c194f022038baf73097cb43ae6b4faa5fd22422355a515eab90aa8be877d10db5d940e8ee:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.