← Volver a CVEs
CVE-2025-68939
HIGH8.2
Descripcion
Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
Detalles CVE
Puntuacion CVSS v3.18.2
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L
Vector de ataqueNETWORK
ComplejidadHIGH
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado12/26/2025
Ultima modificacion1/2/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
gitea:gitea
Debilidades (CWE)
CWE-424
Referencias
https://blog.gitea.com/release-of-1.23.0/(cve@mitre.org)
https://github.com/go-gitea/gitea/pull/32151(cve@mitre.org)
https://github.com/go-gitea/gitea/releases/tag/v1.23.0(cve@mitre.org)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.