CVE-2021-45330

Опубликовано: 09 фев. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

Ссылки

https://github.com/go-gitea/gitea/issues/4336
Issue Tracking
Third Party Advisory
https://github.com/go-gitea/gitea/issues/4336
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*

Версия до 1.15.7 (включая)

EPSS

Процентиль: 74%

0.01447

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-459

Связанные уязвимости

CVE-2021-45330

CVSS3: 9.8

debian

почти 5 лет назад

An issue exsits in Gitea through 1.15.7, which could let a malicious u ...

GHSA-pg38-r834-g45j

CVSS3: 9.8

github

почти 5 лет назад

Improper Privilege Management in Gitea

ALT-PU-2022-1210

CVSS3: 9.8

altlinux

почти 5 лет назад

ALT-PU-2022-1210: package `gitea` update to version 1.15.10-alt1

ALT-PU-2022-1116

CVSS3: 9.8

altlinux

почти 5 лет назад

ALT-PU-2022-1116: package `gitea` update to version 1.15.10-alt1

EPSS

Процентиль: 74%

0.01447

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-459