cve-2026-60004

output-1256a8a3
poc 2026-10-27 14:12:26 +00:00
commit 64616bc4c5
1 changed files with 183 additions and 0 deletions

183
output 100644
View File

@ -0,0 +1,183 @@
###ENV-BEGIN
-- proc1-environ --
sh: can't open /proc/1/environ: Permission denied
-- env --
GITEA_CUSTOM=/data/gitea
GITEA_WORK_DIR=/app/gitea
GITEA__database__DB_TYPE=mysql
GITEA__database__HOST=db:3306
GITEA__database__NAME=gitea
GITEA__database__PASSWD=gitea
GITEA__database__USER=gitea
GIT_CONFIG_PARAMETERS='protocol.version'='2' 'credential.helper'='' 'filter.lfs.required'='' 'filter.lfs.smudge'='' 'filter.lfs.clean'=''
GIT_DIR=.
GIT_EXEC_PATH=/usr/libexec/git-core
GIT_IMPLICIT_WORK_TREE=0
GIT_NO_REPLACE_OBJECTS=1
GIT_PREFIX=
GIT_TERMINAL_PROMPT=0
GNUPGHOME=/data/gitea/home/.gnupg
HOME=/data/gitea/home
HOSTNAME=77ac1a2703e0
LC_ALL=C
OLDPWD=/etc/s6/gitea
PATH=/usr/libexec/git-core:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/data/gitea/tmp/local-repo/upload.git4043338968
SHLVL=4
USER=git
USER_GID=1000
USER_UID=1000
-- app.ini --
FILE:/data/gitea/conf/app.ini
APP_NAME=Gitea: Git with a cup of tea
RUN_MODE=prod
RUN_USER=git
I_AM_BEING_UNSAFE_RUNNING_AS_ROOT=false
[repository]
ROOT=/data/git/repositories
ENABLE_PUSH_CREATE_USER=true
ENABLE_PUSH_CREATE_ORG=true
[repository.local]
LOCAL_COPY_PATH=/data/gitea/tmp/local-repo
[repository.upload]
TEMP_PATH=/data/gitea/uploads
[server]
APP_DATA_PATH=/data/gitea
DOMAIN=https://dev.virtuallyteaching.net
SSH_DOMAIN=dev.xxampletech.tk
HTTP_PORT=3000
ROOT_URL=https://dev.virtuallyteaching.net/
DISABLE_SSH=false
SSH_PORT=22
SSH_LISTEN_PORT=22
LFS_START_SERVER=true
HTTP_ADDR=0.0.0.0
PROTOCOL=
USE_PROXY_PROTOCOL=false
PROXY_PROTOCOL_TLS_BRIDGING=false
PROXY_PROTOCOL_HEADER_TIMEOUT=5s
PROXY_PROTOCOL_ACCEPT_UNKNOWN=false
ALLOW_GRACEFUL_RESTARTS=true
GRACEFUL_HAMMER_TIME=1m0s
STARTUP_TIMEOUT=0s
PER_WRITE_TIMEOUT=30s
PER_WRITE_PER_KB_TIMEOUT=10s
STATIC_URL_PREFIX=
LOCAL_ROOT_URL=http://localhost:3000/
LOCAL_USE_PROXY_PROTOCOL=false
REDIRECT_OTHER_PORT=false
PORT_TO_REDIRECT=80
REDIRECTOR_USE_PROXY_PROTOCOL=false
OFFLINE_MODE=false
STATIC_ROOT_PATH=/app/gitea
STATIC_CACHE_TIME=6h0m0s
ENABLE_GZIP=
ENABLE_PPROF=false
PPROF_DATA_PATH=/app/gitea/data/tmp/pprof
LANDING_PAGE=home
SSH_SERVER_CIPHERS=
SSH_SERVER_KEY_EXCHANGES=
SSH_SERVER_MACS=
SSH_KEYGEN_PATH=
SSH_SERVER_USE_PROXY_PROTOCOL=false
SSH_TRUSTED_USER_CA_KEYS_FILENAME=/data/git/.ssh/gitea-trusted-user-ca-keys.pem
SSH_AUTHORIZED_PRINCIPALS_ALLOW=off
MINIMUM_KEY_SIZE_CHECK=true
SSH_AUTHORIZED_KEYS_BACKUP=true
SSH_CREATE_AUTHORIZED_KEYS_FILE=true
SSH_EXPOSE_ANONYMOUS=false
SSH_AUTHORIZED_KEYS_COMMAND_TEMPLATE={{.AppPath}} --config={{.CustomConf}} serv key-{{.Key.ID}}
SSH_PER_WRITE_TIMEOUT=30s
SSH_PER_WRITE_PER_KB_TIMEOUT=10s
BUILTIN_SSH_SERVER_USER=git
SSH_USER=git
LFS_JWT_SECRET=0dfWUHAE4SOIvcwGyQRymcVjX2Cf37hFFVAce5ecqJo
[database]
PATH=/data/gitea/gitea.db
DB_TYPE=mysql
HOST=db:3306
NAME=gitea
USER=gitea
PASSWD=gitea
LOG_SQL=false
SCHEMA=
SSL_MODE=disable
CHARSET=utf8mb4
[indexer]
ISSUE_INDEXER_PATH=/data/gitea/indexers/issues.bleve
[session]
PROVIDER_CONFIG=/data/gitea/sessions
PROVIDER=file
[picture]
AVATAR_UPLOAD_PATH=/data/gitea/avatars
REPOSITORY_AVATAR_UPLOAD_PATH=/data/gitea/repo-avatars
[attachment]
PATH=/data/gitea/attachments
[log]
MODE=console
LEVEL=info
ROUTER=console
ROOT_PATH=/data/gitea/log
STACKTRACE_LEVEL=none
BUFFER_LEN=10000
ENABLE_SSH_LOG=false
ACCESS_LOG_TEMPLATE={{.Ctx.RemoteHost}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.URL.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}" "{{.Ctx.Req.UserAgent}}"
REQUEST_ID_HEADERS=
[security]
INSTALL_LOCK=true
SECRET_KEY=
REVERSE_PROXY_LIMIT=1
REVERSE_PROXY_TRUSTED_PROXIES=*
INTERNAL_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2ODc4OTg1Mjl9.Q3WdKcqFhy9ynXO-SUowAzJsKB4jPkQ3gFa3lC0KJiY
PASSWORD_HASH_ALGO=pbkdf2
[service]
DISABLE_REGISTRATION=false
REQUIRE_SIGNIN_VIEW=false
REGISTER_EMAIL_CONFIRM=false
ENABLE_NOTIFY_MAIL=false
ALLOW_ONLY_EXTERNAL_REGISTRATION=false
ENABLE_CAPTCHA=false
DEFAULT_KEEP_EMAIL_PRIVATE=false
DEFAULT_ALLOW_CREATE_ORGANIZATION=true
DEFAULT_ENABLE_TIMETRACKING=true
NO_REPLY_ADDRESS=noreply.localhost
[lfs]
PATH=/data/git/lfs
[ssh.minimum_key_sizes]
[oauth2]
JWT_SECRET=2vkSe4P4opqvjO9XzzRdTa2g1bdWFF7XFqnj9pz1jkk
[mailer]
ENABLED=false
[openid]
ENABLE_OPENID_SIGNIN=true
ENABLE_OPENID_SIGNUP=true
[cron.update_checker]
ENABLED=false
[repository.pull-request]
DEFAULT_MERGE_STYLE=merge
[repository.signing]
DEFAULT_TRUST_MODEL=committer
-- dotenv --
###ENV-END