ZeroHour

CVE-2025-68944

CVSS 3.1
5.3 medium
EPSS
<1%p20
Published
()
Modified
Description

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

Vendors
gitea
Products
gitea
Weakness
CWE-441
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In the news

No ingested article mentions this CVE yet.