Lucene search
+L

2 matches found

OSV
OSV
added 2026/02/02 9:05 p.m.10 views

GO-2026-4368 Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea...

6.5CVSS5.2AI score0.00339EPSS
SaveExploits0References7
OSV
OSV
added 2026/01/23 12:31 a.m.5 views

GHSA-J8XR-C56Q-M8JJ Gitea improperly exposes issue titles and repository names through previously started stopwatches

Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches...

2.3CVSS5.5AI score0.00339EPSS
SaveExploits0References7
Rows per page
Query Builder