Yüksek CVSS 8.2
CVE-2026-27771: CVE-2026-27771: eksik yetkilendirme
Açıklama (NVD)
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.
Özet bilgiler
- CVSS v3.1
- 8.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - EPSS
- %1,39 (yüzdelik 72)
- CWE
- CWE-862
- Yama
- Yok / bilinmiyor