PT-2025-53433 · Gitea+1 · Gitea+1

D3Struct1V3-Create + 1 · Publicado 2025-12-25 · Atualizado 2026-01-29 · CVE-2025-68938

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Nome do Software Vulnerável e Versões Afetadas Versões do Gitea anteriores à 1.25.2

Descrição O software não gerencia corretamente as permissões ao excluir releases. Isso pode permitir a exclusão não autorizada de releases.

Recomendações Atualize para a versão 1.25.2 ou posterior.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BDU:2026-03395

BIT-GITEA-2025-68938

CVE-2025-68938

GHSA-CM54-PFMC-XRWX

GO-2025-4258

SUSE-SU-2026:0037-1

Produtos afetados

Gitea

Red Os

Referências · 94

• https://github.com/go-gitea/gitea/pull/36002/commits/d4262131b39899d9e9ee5caa2635c810d476e43f#diff-8962bac89952027d50fa51f31f59d65bedb4c02bde0265eced5cf256cbed306d · Correção
• https://github.com/go-gitea/gitea/releases/tag/v1.25.2 · Nota
• https://suse.com/security/cve/CVE-2025-68941 · Nota
• https://suse.com/security/cve/CVE-2025-67508 · Nota
• https://suse.com/security/cve/CVE-2025-10543 · Nota
• https://suse.com/security/cve/CVE-2025-60633 · Nota
• https://suse.com/security/cve/CVE-2025-68939 · Nota
• https://suse.com/security/cve/CVE-2025-65637 · Nota
• https://suse.com/security/cve/CVE-2025-66508 · Nota
• https://suse.com/security/cve/CVE-2025-64702 · Nota
• https://suse.com/security/cve/CVE-2025-64708 · Nota
• https://suse.com/security/cve/CVE-2025-67499 · Nota
• https://suse.com/security/cve/CVE-2025-13888 · Nota
• https://suse.com/security/cve/CVE-2025-66565 · Nota
• https://suse.com/security/cve/CVE-2025-66490 · Nota