CVE-2025-68941

Опубликовано: 26 дек. 2025

Источник: nvd

CVSS3: 4.9

CVSS3: 5.3

EPSS Низкий

Описание

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

Ссылки

https://blog.gitea.com/release-of-1.22.3/
Release Notes
https://github.com/go-gitea/gitea/pull/32218
Issue Tracking
Patch
https://github.com/go-gitea/gitea/releases/tag/v1.22.3
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*

Версия до 1.22.3 (исключая)

EPSS

Процентиль: 16%

0.00248

Низкий

4.9 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVE-2025-68941

CVSS3: 4.9

ubuntu

8 месяцев назад

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

CVE-2025-68941

CVSS3: 4.9

redhat

8 месяцев назад

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

CVE-2025-68941

CVSS3: 4.9

debian

8 месяцев назад

Gitea before 1.22.3 mishandles access to a private resource upon recei ...

ROS-20260224-73-0034

CVSS3: 5.3

redos

6 месяцев назад

Уязвимость gitea

GHSA-xfq3-qj7j-4565

CVSS3: 4.9

github

8 месяцев назад

Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources

EPSS

Процентиль: 16%

0.00248

Низкий

4.9 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-863