Improper Privilege Management in Gitea

GHSA-pg38-r834-g45j · BIT-gitea-2021-45330 · CVE-2021-45330 · GO-2022-0982

Published Feb 10, 2022 · Modified Aug 21, 2024

Description

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2021-45330
WEB https://github.com/go-gitea/gitea/issues/4336
WEB https://github.com/go-gitea/gitea/pull/4840

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes