GHSA-hfmf-q69j-6m5p

Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-hfmf-q69j-6m5p/GHSA-hfmf-q69j-6m5p.json

Aliases

• CVE-2021-45331

Published

2022-02-10T00:00:22Z

Modified

2023-09-15T20:18:29Z

Details

An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-45331
• https://github.com/go-gitea/gitea/pull/3878
• https://blog.gitea.io/2018/08/gitea-1.5.0-is-released/