Orta CVSS 5.3
CVE-2026-25782: CVE-2026-25782: güvenlik açığı
Açıklama (NVD)
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue.
Özet bilgiler
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,39 (yüzdelik 33)
- CWE
- CWE-639
- Yama
- Yok / bilinmiyor