MEDIUM 5.8 Go
Gitea: anonymous user can visit private user's project
GHSA-7xq4-mwcp-q8fx · BIT-gitea-2025-68945 · CVE-2025-68945 · GO-2025-4262
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
In Gitea before 1.21.2, an anonymous user can visit a private user's project.
Ready to move
Start Securing
Free, no credit card | First findings in minutes