CVE-2025-68943

Publication date

2025-12-26 03:19:45

Family

mitre

State

PUBLISHED

Description

Gitea before 1.21.8 inadvertently discloses users login times by allowing (for example) the lastlogintime explore/users sort order.