Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18523
HistoryMar 11, 2022 - 12:00 a.m.

Gitea Authorization Error Vulnerability

2022-03-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
gitea
authorization error
vulnerability
pam authentication
expired accounts
expired passwords
security issue

EPSS

0.001

Percentile

30.4%

Gitea is a project to set up a self-hosted Git service. Gitea suffers from an authorization error vulnerability that stems from PAM authentication when building and configuring Gitea, which skips checking authorization altogether and can be exploited by attackers to log into expired accounts and accounts with expired passwords.