PT-2025-53433 · Gitea+1 · Gitea+1

D3Struct1V3-Create + 1 · Published 2025-12-25 · Updated 2026-01-29 · CVE-2025-68938

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.2

Description The software does not properly manage permissions when deleting releases. This can allow unauthorized deletion of releases.

Recommendations Update to version 1.25.2 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-03395

BIT-GITEA-2025-68938

CVE-2025-68938

GHSA-CM54-PFMC-XRWX

GO-2025-4258

SUSE-SU-2026:0037-1

Affected Products

Gitea

Red Os

References · 94

• https://github.com/go-gitea/gitea/pull/36002/commits/d4262131b39899d9e9ee5caa2635c810d476e43f#diff-8962bac89952027d50fa51f31f59d65bedb4c02bde0265eced5cf256cbed306d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68938 · Security Note
• https://osv.dev/vulnerability/GO-2025-4258 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03395 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68938 · Vendor Advisory
• https://github.com/go-gitea/gitea/releases/tag/v1.25.2 · Note
• https://suse.com/security/cve/CVE-2025-68941 · Note
• https://suse.com/security/cve/CVE-2025-67508 · Note
• https://suse.com/security/cve/CVE-2025-10543 · Note
• https://suse.com/security/cve/CVE-2025-60633 · Note
• https://suse.com/security/cve/CVE-2025-68939 · Note
• https://suse.com/security/cve/CVE-2025-65637 · Note
• https://suse.com/security/cve/CVE-2025-66508 · Note