GHSA-pg38-r834-g45j

ghsaUSosv

Improper Privilege Management in Gitea

view advisory published 2022-02-10Licence: CC-BY-4.0

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-45330US	critical9.8	1.45% (73rd)	—	2022-02-09
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server s…

references

External citations — patches, advisories, analysis.

https://github.com/go-gitea/gitea/issues/4336WEB
https://github.com/go-gitea/gitea/pull/4840WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-45330ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan