Em resumo
- CVE-2019-11576 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta code.gitea.io/gitea, gitea (gitea).
- Chance de exploração nos próximos 30 dias (EPSS): 1.8%, maior que 78.1% das vulnerabilidades.
- Correção: atualize para 1.8.0 ou posterior.
Description
Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.
NVD description
Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.
Mais vulnerabilidades de code.gitea.io/gitea
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free