{"id":"EUVD-2025-205416","enisaUuid":"90fc6dbe-3d82-37e3-ae7a-1f76469f2ade","description":"Gitea before 1.21.8 inadvertently discloses users\u0027 login times by allowing (for example) the lastlogintime explore/users sort order.","datePublished":"Dec 26, 2025, 3:19:45 AM","dateUpdated":"Dec 26, 2025, 7:28:57 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.21.8-and-1.21.9-and-1.21.10/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.8\nhttps://github.com/go-gitea/gitea/pull/29430\n","aliases":"CVE-2025-68943\nGHSA-jhx5-4vr4-f327\n","assigner":"mitre","epss":0.36,"enisaIdProduct":[{"id":"d783bde8-d713-3e4f-9c89-c06a230c6f58","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.21.8"}],"enisaIdVendor":[{"id":"88d476ae-ede2-39c8-bdfb-5e546584a0f7","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"6cfac9ed-0c7c-31b4-bf7a-006a1b0a832b","vulnerability":{"id":"CVE-2025-68943","description":"Gitea before 1.21.8 inadvertently discloses users\u0027 login times by allowing (for example) the lastlogintime explore/users sort order.","datePublished":"Dec 26, 2025, 3:19:45 AM","dateUpdated":"Dec 26, 2025, 7:28:57 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.21.8-and-1.21.9-and-1.21.10/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.8\nhttps://github.com/go-gitea/gitea/pull/29430\n","enisa_id":"EUVD-2025-205416\n","assigner":"mitre","epss":0.36,"dataProcessed":"Nov 8, 2026, 7:13:21 AM","vulnerabilityProduct":[{"id":"f5130771-20e3-3385-91a3-a4cccb6d9e70","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.21.8"}],"vulnerabilityVendor":[{"id":"eb95b8df-482c-3211-a5ed-cc8c586cac7a","vendor":{"name":"Gitea"}}]}},{"id":"f5c98190-7f42-36f1-b0ae-9b79f1f2090f","vulnerability":{"id":"GHSA-jhx5-4vr4-f327","description":"Gitea inadvertently discloses users\u0027 login times by allowing (for example) the lastlogintime explore/users sort order","datePublished":"Dec 26, 2025, 6:30:27 AM","dateUpdated":"Dec 26, 2025, 7:17:47 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68943\nhttps://github.com/go-gitea/gitea/pull/29430\nhttps://blog.gitea.com/release-of-1.21.8-and-1.21.9-and-1.21.10\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.8\n","enisa_id":"EUVD-2025-205416\n","aliases":"CVE-2025-68943\nGHSA-jhx5-4vr4-f327\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:54:33 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}