DeutschShown in its original language — a full translation is planned for a future version.
Gitea: Mehrere Schwachstellen
view advisory published 2025-12-28
Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-68946US | — | — | ||
In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS. | ||||
| CVE-2025-68945US | medium5.3 | — | ||
In Gitea before 1.21.2, an anonymous user can visit a private user's project. | ||||
| CVE-2025-68944US | medium5.3 | — | ||
Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries. | ||||
| CVE-2025-68943US | — | — | ||
Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order. | ||||
| CVE-2025-68942US | — | — | ||
Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text. | ||||
| CVE-2025-68941US | medium5.3OT elevated | — | ||
Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources. | ||||
| CVE-2025-68940US | medium5.3OT elevated | — | ||
In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request. | ||||
| CVE-2025-68939US | medium5.3 | — | ||
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API. | ||||
| CVE-2025-68938US | medium5.3OT elevated | — | ||
Gitea before 1.25.2 mishandles authorization for deletion of releases. | ||||
| CVE-2025-68937US | — | Exploit | ||
Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for t… | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
- RedHat Bugzilla vom 2025-12-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan