exploitDog

CVE-2026-26232

Опубликовано: 03 июл. 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

Ссылки

https://blog.gitea.com/release-of-1.25.5/
https://github.com/go-gitea/gitea/pull/36797
https://github.com/go-gitea/gitea/pull/36851
https://github.com/go-gitea/gitea/releases/tag/v1.25.5

EPSS

Процентиль: 31%

0.00379

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-294

Связанные уязвимости

CVE-2026-26232

CVSS3: 9.1

debian

около 2 месяцев назад

Gitea versions before 1.25.5 do not consistently enforce OAuth2 author ...

GHSA-5v69-g2m3-3hq3

CVSS3: 9.1

github

около 2 месяцев назад

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

EPSS

Процентиль: 31%

0.00379

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-294