CVE-2021-45331 Reuse of one time passwords allowed in Gitea
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| code.gitea.io/gitea(Go) | < 1.5.0 | 1.5.0 |
| Gitea | < 1.5.0 | 1.5.0 |
| alpine/gitea(Alpine:v3.16) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.17) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.18) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.19) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.20) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.21) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.22) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.23) | < 1.5.1-r0 | 1.5.1-r0 |
| alpine/gitea(Alpine:v3.24) | < 1.5.1-r0 | 1.5.1-r0 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- blog.gitea.io release-notes vendor-advisory
- github.com vendor-advisory
- security.alpinelinux.org vendor-advisory