{"id":"EUVD-2025-205424","enisaUuid":"f2def808-4f22-30d1-b399-ea0232254b11","description":"In Gitea before 1.21.2, an anonymous user can visit a private user\u0027s project.","datePublished":"Dec 26, 2025, 3:58:46 AM","dateUpdated":"Dec 26, 2025, 6:59:29 PM","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.21.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.2\nhttps://github.com/go-gitea/gitea/pull/28423\n","aliases":"CVE-2025-68945\nGHSA-7xq4-mwcp-q8fx\n","assigner":"mitre","epss":0.36,"enisaIdProduct":[{"id":"b661ff24-18d1-370e-a5bf-e61d0017d936","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.21.2"}],"enisaIdVendor":[{"id":"153036c2-4d23-3607-a253-27e8b16bbf10","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"5c4a8cfc-9cc0-3424-810b-7af58a13bd51","vulnerability":{"id":"GHSA-7xq4-mwcp-q8fx","description":"Gitea: anonymous user can visit private user\u0027s project","datePublished":"Dec 26, 2025, 6:30:27 AM","dateUpdated":"Dec 26, 2025, 7:36:13 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68945\nhttps://github.com/go-gitea/gitea/pull/28423\nhttps://blog.gitea.com/release-of-1.21.2\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.2\n","enisa_id":"EUVD-2025-205424\n","aliases":"GHSA-7xq4-mwcp-q8fx\nCVE-2025-68945\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"850d349b-2d94-353c-bc88-a5720c5ebbee","vulnerability":{"id":"CVE-2025-68945","description":"In Gitea before 1.21.2, an anonymous user can visit a private user\u0027s project.","datePublished":"Dec 26, 2025, 3:58:46 AM","dateUpdated":"Dec 26, 2025, 6:59:29 PM","status":"PUBLISHED","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.21.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.21.2\nhttps://github.com/go-gitea/gitea/pull/28423\n","enisa_id":"EUVD-2025-205424\n","assigner":"mitre","epss":0.36,"dataProcessed":"Nov 6, 2026, 7:14:12 AM","vulnerabilityProduct":[{"id":"9c591eeb-8a4f-37a0-9f20-26342e728ebb","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.21.2"}],"vulnerabilityVendor":[{"id":"14838404-235a-3a71-9266-2c5fa2c70941","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[]}