Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing     the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.
    (CVE-2021-45327)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing
    the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.
    (CVE-2021-45327)

ID	Name	Product	Family	Severity
262783	Linux Distros Unpatched Vulnerability : CVE-2021-45327	Nessus	Misc.	critical
416572	SCA: security update for github.com/go-gitea/gitea (GHSA-jrpg-35hw-m4p9)	Tenable Cloud Security	SCA Checks	critical
416572	SCA: security update for github.com/go-gitea/gitea (GHSA-jrpg-35hw-m4p9)	Tenable Self-Hosted Container Security	SCA Checks	critical
404667	Alpine: multiple gitea packages: security update to 1.11.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404667	Alpine: multiple gitea packages: security update to 1.11.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2021-45327

critical

Tenable Plugins

critical

critical

critical

critical

critical