5 matches found
CVE-2026-24791
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-24791
The Gitea Git repository management system is affected by an incorrect authorization vulnerability (CVE-2026-24791 ). The root cause is that public-only tokens can be used to bypass private-resource restrictions on /api/v1/user self routes. Successful exploitation allows an attacker to increase t...
CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-24791
creationtimestamp| type| source ---|---|--- 2026-06-14 20:09:21+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-wrr5-99h5-gq57 2026-08-14 12:45:18+00:00| seen|...