Security Advisory

CVE-2025-68939

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-26 02:03:59

Last updated 2025-12-26 18:57:27

Assigner mitre

State PUBLISHED

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.