Lucene search
Veracode Vulnerability DatabaseVERACODE:34656HistoryMar 14, 2022 - 4:58 a.m.
Authorization Bypass
2022-03-1404:58:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
51.4%
github.com/gogs/gogs is vulnerable to authorization bypass. When gogs is built and configured for PAM authentification, the library does not properly validate the authorization of the accounts, allowing an attacker to access expired accounts.
References
github.com/advisories/GHSA-65f3-3278-7m65
github.com/advisories/GHSA-gw5h-h6hj-f56g
github.com/gogs/gogs/commit/64102be2c90e1b47dbdd379873ba76c80d4b0e78
github.com/gogs/gogs/issues/6810
github.com/gogs/gogs/pull/6819
huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62
huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62/
Related
cvelist
cvelist
CVE-2022-0871 Missing Authorization in gogs/gogs
2022-03-11 00:00:00
huntr
huntr
Improper Authorization
2022-03-06 10:34:14
osv
osv
CVE-2022-0871
2022-03-11 12:15:07
Improper Authorization in Gogs
2022-03-12 00:00:34
Gogs vulnerable to improper PAM authorization handling
2022-03-14 22:58:37
cve
cve
CVE-2022-0871
2022-03-11 12:15:07
prion
prion
Authorization
2022-03-11 12:15:00
alpinelinux
alpinelinux
CVE-2022-0871
2022-03-11 12:15:07
gitlab
gitlab
Improper Authorization in Gogs
2022-03-12 00:00:00
github
github
Gogs vulnerable to improper PAM authorization handling
2022-03-14 22:58:37
nvd
nvd
CVE-2022-0871
2022-03-11 12:15:07
openvas
openvas
Gogs < 0.12.5 Multiple Vulnerabilities
2022-03-16 00:00:00