CRITICAL 9.8 Go
Reuse of one time passwords allowed in Gitea
GHSA-hfmf-q69j-6m5p · BIT-gitea-2021-45331 · CVE-2021-45331 · GO-2022-0315
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.
Ready to move
Start Securing
Free, no credit card | First findings in minutes