CVE-2025-68941

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

Published: 2025-12-26 · CVSS: 4.9 · CVSS 3.1

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7