CVE-2025-64175
Last modified
CVE-2025-64175 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, Gogs’ 2FA recovery code validation does not scope codes by user, enabling cross-account bypass. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, Gogs’ 2FA recovery code validation does not scope codes by user, enabling cross-account bypass. If an attacker knows a victim’s username and password, they can use any unused recovery code (e.g., from their own account) to bypass the victim’s 2FA. This enables full account takeover and renders 2FA ineffective in all environments where it's enabled.. This issue has been patched in versions 0.13.4 and 0.14.0+dev.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gogs | Gogs | < 0.13.4 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-64175?
How severe is CVE-2025-64175?
How do I fix CVE-2025-64175?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-64169Wazuh is a free and open source platform used for threat pre…4.9
- CVE-2025-6417A vulnerability has been found in PHPGurukul Art Gallery Man…8.8
- CVE-2025-64170sudo-rs is a memory safe implementation of sudo and su writt…3.8
- CVE-2025-64171MARIN3R is a lightweight, CRD based envoy control plane for …8.7
- CVE-2025-64173Apollo Router Core is a configurable graph router written in…7.5
- CVE-2025-64174Magento-lts is a long-term support alternative to Magento Co…4.8
- CVE-2025-64176ThinkDashboard is a self-hosted bookmark dashboard built wit…6.1
- CVE-2025-64177ThinkDashboard is a self-hosted bookmark dashboard built wit…6.1
- CVE-2025-64178Jellysweep is a cleanup tool for the Jellyfin media server. …8.9
- CVE-2025-64179lakeFS is an open-source tool that transforms object storage…5.3
- CVE-2025-6418A vulnerability was found in code-projects Simple Online Hot…9.8
- CVE-2025-64180Manager-io/Manager is accounting software. In Manager Deskto…10
Are you affected by CVE-2025-64175?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST