Start for Free
MEDIUM 5.3 Go

Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order

GHSA-jhx5-4vr4-f327 · BIT-gitea-2025-68943 · CVE-2025-68943 · GO-2025-4266

Published · Modified

Description

Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes