← Back to CVE search

CVE-2026-20909

Gitea

Description

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.

CVSS 5.3EPSS 0.28600000000000003%Risk 0.54
View source
Published
2026-07-03 21:16:56
Affected versions
<1.25.5
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N