PT-2025-53441 · Gitea · Gitea

Inferenceus · Published 2025-12-26 · Updated 2026-01-06 · CVE-2025-68943

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.21.8

Description The software reveals user login times due to allowing sorting by last login time in the explore/users section.

Recommendations Update to version 1.21.8 or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BIT-GITEA-2025-68943

CVE-2025-68943

GHSA-JHX5-4VR4-F327

GO-2025-4266

SUSE-SU-2026:0037-1

Affected Products

Gitea

References · 90

• https://osv.dev/vulnerability/GO-2025-4266 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68943 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68943 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://github.com/go-gitea/gitea/pull/29430 · Note
• https://github.com/go-gitea/gitea/releases/tag/v1.21.8 · Note
• https://suse.com/security/cve/CVE-2025-68941 · Note
• https://suse.com/security/cve/CVE-2025-67508 · Note
• https://suse.com/security/cve/CVE-2025-10543 · Note
• https://suse.com/security/cve/CVE-2025-60633 · Note
• https://suse.com/security/cve/CVE-2025-68939 · Note
• https://suse.com/security/cve/CVE-2025-65637 · Note
• https://suse.com/security/cve/CVE-2025-66508 · Note
• https://suse.com/security/cve/CVE-2025-64702 · Note
• https://suse.com/security/cve/CVE-2025-64708 · Note