{"id":"EUVD-2025-206132","enisaUuid":"5fd599d1-8972-3538-aab3-0683c260868f","description":"In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.","datePublished":"Jan 1, 2026, 4:39:48 AM","dateUpdated":"Jan 5, 2026, 7:56:03 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.25.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.2\nhttps://github.com/go-gitea/gitea/issues/35984\nhttps://github.com/go-gitea/gitea/pull/36002\n","aliases":"CVE-2025-69413\nGHSA-pc73-rj2c-wvf9\n","assigner":"mitre","epss":0.39,"enisaIdProduct":[{"id":"8b984564-319c-3914-b722-28df395b4724","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.2"}],"enisaIdVendor":[{"id":"9fdee055-b403-385b-aef6-8cbf92e52b67","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"4a5183f9-4572-35c1-a729-1b27d6d26a1f","vulnerability":{"id":"GHSA-pc73-rj2c-wvf9","description":"Gitea\u0027s /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists","datePublished":"Jan 1, 2026, 6:30:23 AM","dateUpdated":"Jan 2, 2026, 3:52:49 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-69413\nhttps://github.com/go-gitea/gitea/issues/35984\nhttps://github.com/go-gitea/gitea/pull/36002\nhttps://blog.gitea.com/release-of-1.25.2\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.2\n","enisa_id":"EUVD-2025-206132\n","aliases":"CVE-2025-69413\nGHSA-pc73-rj2c-wvf9\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"5c95e3a1-a045-3a0b-a392-7c5e0e4e9267","vulnerability":{"id":"CVE-2025-69413","description":"In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.","datePublished":"Jan 1, 2026, 4:39:48 AM","dateUpdated":"Jan 5, 2026, 7:56:03 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://blog.gitea.com/release-of-1.25.2/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.2\nhttps://github.com/go-gitea/gitea/issues/35984\nhttps://github.com/go-gitea/gitea/pull/36002\n","enisa_id":"EUVD-2025-206132\n","assigner":"mitre","epss":0.39,"dataProcessed":"Oct 27, 2026, 7:13:30 AM","vulnerabilityProduct":[{"id":"cb02e271-15b3-3b01-938f-45dc1d5234b4","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.2"}],"vulnerabilityVendor":[{"id":"94d5ddd7-dc24-3d4c-ba2e-4f41cb63bcd0","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[{"id":"ca90c0fe-6362-3e7a-8154-52cd171dfdb2","advisory":{"id":"WID-SEC-W-2026-0001","description":"Gitea: Schwachstelle ermöglicht Offenlegung von Informationen","summary":"Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Gitea ausnutzen, um Informationen offenzulegen.","datePublished":"Jan 1, 2026, 11:00:00 PM","dateUpdated":"Jan 1, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0001.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0001\n","aliases":"CVE-2025-69413\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"e93fb1a4-bdd4-31b3-bbc6-f45065b07c0d","product":{"name":"Gitea","vendor":{"name":"Gitea"}}},{"id":"ec195547-d81b-345d-9f41-ccfa035ad1f4","product":{"name":"1.25.2","vendor":{"name":"golang"}}}]}}]}