CVE-2022-0905: Improper Authorization in Gitea

March 11, 2022

Improper Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

References

github.com/advisories/GHSA-jr9c-h74f-2v28
github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2
huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb
nvd.nist.gov/vuln/detail/CVE-2022-0905

Code Behaviors & Features

Detect and mitigate CVE-2022-0905 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →