CVE-2025-68946

Опубликовано: 26 дек. 2025

Источник: debian

EPSS Низкий

Описание

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

Пакет	Статус	Версия исправления	Релиз	Тип
gitea	removed			package

EPSS

Процентиль: 13%

0.00226

Низкий

CVE-2025-68946

CVSS3: 5.4

ubuntu

8 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

CVE-2025-68946

CVSS3: 5.4

redhat

8 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

CVE-2025-68946

CVSS3: 5.4

nvd

8 месяцев назад

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

GHSA-hq57-c72x-4774

CVSS3: 5.4

github

8 месяцев назад

Gitea vulnerable to Cross-site Scripting

EPSS

Процентиль: 13%

0.00226

Низкий