{"id":"CVE-2022-0905","published":"2022-03-10T00:00:00Z","modified":"2024-08-02T23:47:41Z","title":"Missing Authorization in go-gitea/gitea","vendor":"go-gitea","product":"go-gitea/gitea","tier":"tail","description":{"text":"Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00847,"percentile":0.57933,"provenance":"source"},"cwes":[{"id":"CWE-862","name":"Missing Authorization"}],"references":[{"url":"https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb","tags":[]},{"url":"https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2","tags":[]}],"priority":{"score":16.1,"factors":[{"name":"EPSS percentile","points":11.59},{"name":"CVSS severity","points":4.55}]},"vendorSlug":"go-gitea","affectedVersions":[{"vendor":"go-gitea","product":"go-gitea/gitea","versions":[">= unspecified, < 1.16.4"]}],"affected":[{"ecosystem":"Go","package":"code.gitea.io/gitea","vulnerableRanges":["<1.16.4"],"patched":["1.16.4"],"from":["GHSA-jr9c-h74f-2v28","GO-2022-0609"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1462","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2021-28378","published":"2021-03-15","fixed":"1.13.4","kev":false},{"cve":"CVE-2021-29134","published":"2022-03-15","fixed":"1.13.6","kev":false},{"cve":"CVE-2018-15192","published":"2018-08-08","fixed":"1.16.0-rc1","kev":false},{"cve":"CVE-2022-0905","published":"2022-03-10","fixed":"1.16.4","kev":false},{"cve":"CVE-2022-27313","published":"2022-05-03","fixed":"1.16.4","kev":false},{"cve":"CVE-2022-1058","published":"2022-03-24","fixed":"1.16.5","kev":false,"link":{"from":"CVE-2022-0905","to":"CVE-2022-1058","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:code.gitea.io/gitea","fromFixed":"1.16.4","toFixed":"1.16.5","daysApart":14}]}},{"cve":"CVE-2022-30781","published":"2022-05-16","fixed":"1.16.7","kev":false}],"package":"Go:code.gitea.io/gitea"}}