{"action":"Upgrade code.gitea.io/gitea to 1.8.0 or later.","affected":[{"fixed":"1.8.0","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2019-11576"],"ecosystem":"Go","epss":0.01766,"exploited":false,"fixed_versions":["1.8.0"],"ghsa_id":"GHSA-3393-r4p5-vhqh","id":"tcs_01M5KET0QHVJ1NVE3V6C3B61QZ","modified_at":"2024-04-24T21:11:37.732194Z","published_at":"2022-05-24T16:44:49Z","references":["https://osv.dev/vulnerability/GHSA-3393-r4p5-vhqh","https://nvd.nist.gov/vuln/detail/CVE-2019-11576","https://github.com/go-gitea/gitea/pull/6674","https://github.com/go-gitea/gitea/pull/6676","https://blog.gitea.io/2019/04/gitea-1.8.0-is-released","https://github.com/go-gitea/gitea"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-3393-r4p5-vhqh","url":"https://osv.dev/vulnerability/GHSA-3393-r4p5-vhqh"}],"summary":"Gitea Allows 1FA Even for 2FA-Enrolled Accounts"}