Описание
Improper Privilege Management in Gitea
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.
Пакеты
Наименование
code.gitea.io/gitea
go
Затронутые версииВерсия исправления
< 1.6.0
1.6.0
Связанные уязвимости
CVSS3: 9.8
nvd
почти 5 лет назад
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.
CVSS3: 9.8
debian
почти 5 лет назад
An issue exsits in Gitea through 1.15.7, which could let a malicious u ...
CVSS3: 9.8
altlinux
почти 5 лет назад
ALT-PU-2022-1210: package `gitea` update to version 1.15.10-alt1
CVSS3: 9.8
altlinux
почти 5 лет назад
ALT-PU-2022-1116: package `gitea` update to version 1.15.10-alt1