Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34610
HistoryMar 11, 2022 - 9:33 a.m.

Authorization Bypass

2022-03-1109:33:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
github.com/go-gitea/gitea
authorization bypass
pam module

EPSS

0.001

Percentile

30.4%

github.com/go-gitea/gitea is vulnerable to authorization bypass. The vulnerability exists in the Auth function in pam.go due to missing checks in the pam module, allowing a malicious attacker to log in and perform unauthorized actions.