CVE-2021-45331: Critical severity gitea vulnerability
Published Feb 9, 2022
·Updated
An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.
Affected Software
2 affected componentsFixes available
go/code.gitea.io/gitea<1.5.0
1.5.0
Gitea Gitea<1.5.0
Remediation
Patch Available
Event History
Feb 9, 2022
CVE Published
via MITRE·05:22 PM
Data Sourced
via MITRE·05:22 PM
Description
Feb 10, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is CVE-2021-45331?
CVE-2021-45331 is an Authentication Bypass vulnerability in Gitea before version 1.5.0.
2
How can a malicious user exploit CVE-2021-45331?
A malicious user can exploit CVE-2021-45331 by bypassing authentication and gaining unauthorized privileges in Gitea.
3
What is the severity of CVE-2021-45331?
The severity of CVE-2021-45331 is critical, with a severity value of 9.8.
4
Which software versions are affected by CVE-2021-45331?
Gitea versions before 1.5.0 are affected by CVE-2021-45331.
5
How can I fix CVE-2021-45331?
To fix CVE-2021-45331, update Gitea to version 1.5.0 or later.