CVE-2021-45331

9.8

CRITICALCVSS v3

Published

February 9, 2022

CVSS v2

7.5 HIGH

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.

go-gitea/gitea

GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

< 1.5.0NVD