Start for Free
MEDIUM 4.9 Go

Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources

GHSA-xfq3-qj7j-4565 · BIT-gitea-2025-68941 · CVE-2025-68941 · GO-2025-4268

Published · Modified

Description

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes