Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-45326.json"