BIT-gitea-2021-45327

vendorUSosv

view advisory published 2024-03-06Licence: per source

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-45327US	critical9.8OT elevated	2.14% (82nd)	—	2022-02-08
Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user ex…

references

External citations — patches, advisories, analysis.

https://blog.gitea.io/2020/03/gitea-1.11.2-is-released/ADVISORY
https://github.com/go-gitea/gitea/pull/10462ADVISORY
https://github.com/go-gitea/gitea/pull/10465ADVISORY
https://github.com/go-gitea/gitea/pull/10582ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-45327WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan