CVE-2025-68939

Опубликовано: 26 дек. 2025

Источник: debian

EPSS Низкий

Описание

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

Пакет	Статус	Версия исправления	Релиз	Тип
gitea	removed			package

EPSS

Процентиль: 27%

0.00332

Низкий

CVE-2025-68939

CVSS3: 5.3

ubuntu

11 месяцев назад

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

CVE-2025-68939

CVSS3: 8.2

redhat

11 месяцев назад

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

CVE-2025-68939

CVSS3: 5.3

nvd

11 месяцев назад

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

ROS-20260224-73-0036

CVSS3: 5.3

redos

9 месяцев назад

Уязвимость gitea

GHSA-263q-5cv3-xq9g

CVSS3: 8.2

github

11 месяцев назад

Gitea allows attackers to add attachments with forbidden file extensions

EPSS

Процентиль: 27%

0.00332

Низкий