{"id":"CVE-2021-45327","published":"2022-02-08T14:57:36Z","modified":"2024-08-04T04:39:20Z","title":"Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable…","vendor":null,"product":null,"tier":"tail","description":{"text":"Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02139,"percentile":0.81911,"provenance":"source"},"cwes":[],"references":[{"url":"https://blog.gitea.io/2020/03/gitea-1.11.2-is-released/","tags":["x_refsource_MISC"]},{"url":"https://github.com/go-gitea/gitea/pull/10462","tags":["x_refsource_MISC"]},{"url":"https://github.com/go-gitea/gitea/pull/10465","tags":["x_refsource_MISC"]},{"url":"https://github.com/go-gitea/gitea/pull/10582","tags":["x_refsource_MISC"]}],"priority":{"score":16.4,"factors":[{"name":"EPSS percentile","points":16.38}]},"affected":[{"ecosystem":"Go","package":"github.com/go-gitea/gitea","vulnerableRanges":["<1.11.2"],"patched":["1.11.2"],"from":["GHSA-jrpg-35hw-m4p9"],"provenance":"source"},{"ecosystem":"Go","package":"code.gitea.io/gitea","vulnerableRanges":["<1.11.2"],"patched":["1.11.2"],"from":["GO-2022-0310"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1083","exploited":false,"provenance":"source"}}