Описание
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
Связанные уязвимости
CVSS3: 9.1
nvd
около 2 месяцев назад
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
CVSS3: 9.1
debian
около 2 месяцев назад
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 chall ...