CVE-2025-68944

Medium

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

mitre·CWE-441·Published 2025-12-26

CVSS

5.3

EPSS

0.00

KEV

Exploits

cve.orgen

132 chars

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

NVDen

132 chars

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea

GHSAen

132 chars

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Primary	cve.org	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
3.1	Secondary	NVD	5.0	3.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
3.1	Secondary	GHSA	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N