{"action":"Upgrade code.gitea.io/gitea to 1.16.4 or later.","affected":[{"fixed":"1.16.4","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-0905"],"ecosystem":"Go","epss":0.00847,"exploited":false,"fixed_versions":["1.16.4"],"ghsa_id":"GHSA-jr9c-h74f-2v28","id":"tcs_01M5KFER170VRWQJ9C1TWEPRZW","modified_at":"2024-08-21T15:41:46.025501Z","published_at":"2022-03-11T00:02:35Z","references":["https://osv.dev/vulnerability/GHSA-jr9c-h74f-2v28","https://nvd.nist.gov/vuln/detail/CVE-2022-0905","https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2","https://github.com/go-gitea/gitea/commit/3e5c844a7758fa29126d201f4f98bf21bca6d314","https://github.com/go-gitea/gitea","https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-jr9c-h74f-2v28","url":"https://osv.dev/vulnerability/GHSA-jr9c-h74f-2v28"}],"summary":"Gitea Missing Authorization vulnerability"}