En resumen
- CVE-2026-20736 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a code.gitea.io/gitea, gitea (gitea).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.43%, mayor que el 37.6% de las vulnerabilidades.
- Solución: actualizar a 1.25.4 o posterior.
Description
Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.
NVD description
Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.
Más vulnerabilidades de code.gitea.io/gitea
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free