En bref
- CVE-2026-20736 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant code.gitea.io/gitea, gitea (gitea).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.43%, plus élevée que 37.6% des vulnérabilités.
- Correctif : mettre à jour vers 1.25.4 ou plus récent.
Description
Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.
NVD description
Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.
Autres vulnérabilités de code.gitea.io/gitea
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free