{"id":"EUVD-2025-205413","enisaUuid":"af1ff8d8-afbf-3946-b8af-10d8209ad18d","description":"Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text.","datePublished":"Dec 26, 2025, 2:50:35 AM","dateUpdated":"Dec 26, 2025, 7:30:04 PM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":"https://blog.gitea.com/release-of-1.22.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.2\nhttps://github.com/go-gitea/gitea/pull/31966\n","aliases":"CVE-2025-68942\nGHSA-898p-hh3p-hf9r\n","assigner":"mitre","epss":0.25,"enisaIdProduct":[{"id":"af2efe60-9bb8-36db-a2ed-1ac7e00f88fd","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.22.2"}],"enisaIdVendor":[{"id":"2cbb7383-b6ef-34d3-a0dc-e641b1794b24","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"8277a7b0-923e-3820-a32b-f7a033c15129","vulnerability":{"id":"CVE-2025-68942","description":"Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text.","datePublished":"Dec 26, 2025, 2:50:35 AM","dateUpdated":"Dec 26, 2025, 7:30:04 PM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":"https://blog.gitea.com/release-of-1.22.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.2\nhttps://github.com/go-gitea/gitea/pull/31966\n","enisa_id":"EUVD-2025-205413\n","assigner":"mitre","epss":0.25,"dataProcessed":"Nov 6, 2026, 7:14:12 AM","vulnerabilityProduct":[{"id":"0423047c-d0de-365b-9435-bffcd052ee91","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.22.2"}],"vulnerabilityVendor":[{"id":"045b90b8-287b-37e0-95a3-2d3f60dff14a","vendor":{"name":"Gitea"}}]}},{"id":"85d3ee57-8f6c-391d-a299-074ae589aee7","vulnerability":{"id":"GHSA-898p-hh3p-hf9r","description":"Gitea allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text","datePublished":"Dec 26, 2025, 3:30:17 AM","dateUpdated":"Dec 26, 2025, 7:16:42 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68942\nhttps://github.com/go-gitea/gitea/pull/31966\nhttps://blog.gitea.com/release-of-1.22.2\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.2\n","enisa_id":"EUVD-2025-205413\n","aliases":"CVE-2025-68942\nGHSA-898p-hh3p-hf9r\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}