4 matches found
CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
7.7AI score0.00448EPSS
SaveExploits0References4
BIT-GITEA-2025-68941
Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources...
5.3CVSS6.7AI score0.00261EPSS
SaveExploits0References4
Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources
Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources...
5.3CVSS6.9AI score0.00261EPSS
SaveExploits0References5Affected Software1
20