CVE-2021-45326

Description

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.214

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-45326 are fixed in Gitea 1.5.2	Windows
Vulnerabilities CVE-2021-45326 are fixed in Gitea for Linux 1.5.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234