Описание
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitea | removed | package |
Связанные уязвимости
CVSS3: 9.8
nvd
почти 5 лет назад
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.
CVSS3: 9.8
altlinux
почти 5 лет назад
ALT-PU-2022-1210: package `gitea` update to version 1.15.10-alt1
CVSS3: 9.8
altlinux
почти 5 лет назад
ALT-PU-2022-1116: package `gitea` update to version 1.15.10-alt1