CVE-2021-45326: Gitea

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

Affected products

• Gitea Gitea: before 1.5.2 (fixed in 1.5.2)

Published 2022-02-08. Last modified 2026-06-17.