An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-02-09T17:22:44

Updated: 2024-08-04T04:39:20.655Z

Reserved: 2021-12-20T00:00:00

Link: CVE-2021-45331

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-02-09T18:15:10.013

Modified: 2024-11-21T06:32:05.937

Link: CVE-2021-45331

cve-icon Redhat

No data.