← All advisories

High severity7.1NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026

CVE-2022-0905

CVE-2022-0905

Description

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
code.gitea.io/giteaGo	< 1.16.4	1.16.4

Affected products

4

Go Gitea/Gitea2 versions
cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*range: <1.16.4
- (no CPE)range: unspecified
ghsa-coords2 versions
pkg:golang/code.gitea.io/gitea pkg:bitnami/gitea
< 1.16.4+ 1 more
- (no CPE)range: < 1.16.4
- (no CPE)range: < 1.16.4

Patches

Vulnerability mechanics

References

5

github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5cebnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-jr9c-h74f-2v28ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0905ghsaADVISORY
github.com/go-gitea/gitea/commit/3e5c844a7758fa29126d201f4f98bf21bca6d314ghsaWEB

News mentions

0

No linked articles in our index yet.