CVE-2021-45326

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests

published February 8, 2022

CVSS
—
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00577 · 46.9th percentile
Published
2022-02-08T14:48Z
EPSS history
Timeline
  • 08 FEB 14:48Z
    Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests
    cvelistv5