Vulnerability advisory
CVE-2021-45331
Also known as BIT-gitea-2021-45331GHSA-hfmf-q69j-6m5pGO-2022-0315
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/go-gitea/gitea ↗ | |
| All commits before 280ebcbf7c761a212fb091634384847a38f25cb0 | 280ebcbf7c761a212fb091634384847a38f25cb0 |
Also listed as affected (3)
| |
Description
An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.