-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
CVE Vulnerability Details :
CVE-2025-68938
PUBLISHED
More Info
Official Page
Assigner
-
mitre
Assigner Org ID
-
8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At
-
26 Dec, 2025 | 01:19
Updated At
-
26 Dec, 2025 | 18:53
Rejected At
-
▼
CVE Numbering Authority (CNA)
Gitea before 1.25.2 mishandles authorization for deletion of releases.
Affected Products
Vendor
Gitea
Product
Gitea
Default Status
unaffected
Versions
Affected
From
0
before
1.25.2
(semver)
Problem Types
Type
CWE ID
Description
CWE
CWE-863
CWE-863 Incorrect Authorization
Type:
CWE
CWE ID:
CWE-863
Description:
CWE-863 Incorrect Authorization
Metrics
Version
Base score
Base severity
Vector
3.1
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Version:
3.1
Base score:
4.3
Base severity:
MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://blog.gitea.com/release-of-1.25.2/
N/A
https://github.com/go-gitea/gitea/releases/tag/v1.25.2
N/A
https://github.com/go-gitea/gitea/pull/36002/commits/d4262131b39899d9e9ee5caa2635c810d476e43f#diff-8962bac89952027d50fa51f31f59d65bedb4c02bde0265eced5cf256cbed306d
N/A
Hyperlink:
https://blog.gitea.com/release-of-1.25.2/
Resource:
N/A
Hyperlink:
https://github.com/go-gitea/gitea/releases/tag/v1.25.2
Resource:
N/A
Hyperlink:
https://github.com/go-gitea/gitea/pull/36002/commits/d4262131b39899d9e9ee5caa2635c810d476e43f#diff-8962bac89952027d50fa51f31f59d65bedb4c02bde0265eced5cf256cbed306d
Resource:
N/A
▼
Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
Details not found