← Database

CVE-2021-45326

HIGH CVSS: 8.8 Published: 2022-02-08 Modified: 2026-06-17

Description

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

Affected Platforms

Gitea Gitea

Weakness Type

CWE-352

References