5 matches found
CVE-2026-58428
Release attachment extension allowlist bypass via web release edit form variant of CVE-2025-68939...
6.5CVSS0.00463EPSS
SaveExploits0References3
CVE-2026-58428 Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
Release attachment extension allowlist bypass via web release edit form variant of CVE-2025-68939...
0.00463EPSS
SaveExploits0References3
CVE-2026-58428
The Git repository management system Gitea is vulnerable to an attachment extension allowlist bypass via the web release edit form. An authenticated remote attacker with repository write permissions can exploit flaws in the EditReleasePost() function (in routers/web/repo/release.go) and the Updat...
7.1AI score0.00463EPSS
SaveExploits0References3
20