Описание
Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists
In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.
Пакеты
Наименование
code.gitea.io/gitea
go
Затронутые версииВерсия исправления
< 1.25.2
1.25.2
Связанные уязвимости
CVSS3: 5.3
nvd
около 1 месяца назад
In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.
CVSS3: 5.3
debian
около 1 месяца назад
In Gitea before 1.25.2, /api/v1/user has different responses for faile ...