CVE-2022-0905

7.1 highEPSS 0.8%

High (7.1) in gitea gitea. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in code.gitea.io/gitea 1.16.4.

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

Severity

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-jr9c-h74f-2v28	Go	code.gitea.io/gitea	<1.16.4	1.16.4
GO-2022-0609	Go	code.gitea.io/gitea	<1.16.4	1.16.4