CVE-2025-68941

Publication date

2025-12-26 02:31:59

Family

mitre

State

PUBLISHED

Description

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.