Vulnerabilities > CVE-2023-49947 - Incorrect Authorization vulnerability in Forgejo

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
forgejo
CWE-863

Summary

Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.

Vulnerable Configurations

Part Description Count
Application
Forgejo
1

Common Weakness Enumeration (CWE)