Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-20904

Опубликовано: 22 янв. 2026
Источник: debian
EPSS Низкий

Описание

Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users' OpenID identities.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
gitearemovedpackage

EPSS

Процентиль: 20%
0.00277
Низкий

Связанные уязвимости

CVSS3: 6.5
redhat
7 месяцев назад

Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users' OpenID identities.

CVSS3: 6.5
nvd
7 месяцев назад

Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users' OpenID identities.

CVSS3: 6.5
redos
6 месяцев назад

Уязвимость gitea

github
7 месяцев назад

Gitea does not properly validate ownership when toggling OpenID URI visibility

EPSS

Процентиль: 20%
0.00277
Низкий