Количество 5
Количество 5
CVE-2026-20883
Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.
CVE-2026-20883
Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.
CVE-2026-20883
Gitea's stopwatch API does not re-validate repository access permissio ...
ROS-20260224-73-0028
Уязвимость gitea
GHSA-j8xr-c56q-m8jj
Gitea improperly exposes issue titles and repository names through previously started stopwatches
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-20883 Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад | |
CVE-2026-20883 Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад | |
CVE-2026-20883 Gitea's stopwatch API does not re-validate repository access permissio ... | CVSS3: 6.5 | 0% Низкий | 2 месяца назад | |
ROS-20260224-73-0028 Уязвимость gitea | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад | |
GHSA-j8xr-c56q-m8jj Gitea improperly exposes issue titles and repository names through previously started stopwatches | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу