Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-1741

Критический

ALT-PU-2019-1741: package gitea update to version 1.8.0-alt1

Источник
errata.altlinux.org
Дата публикации
26.04.2019
Дата обновления
04.02.2026
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades gitea to version 1.8.0-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.

CVSS3: 9.8
nvd
больше 7 лет назад

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.

CVSS3: 9.8
debian
больше 7 лет назад

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2F ...

CVSS3: 9.8
github
больше 4 лет назад

Gitea Allows 1FA Even for 2FA-Enrolled Accounts