CVE-2025-68943

Description

Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.

PUBLISHED Reserved 2025-12-26 | Published 2025-12-26 | Updated 2025-12-26 | Assigner mitre

Problem types

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Product status

References

blog.gitea.com/release-of-1.21.8-and-1.21.9-and-1.21.10/

github.com/go-gitea/gitea/releases/tag/v1.21.8

github.com/go-gitea/gitea/pull/29430

cve.org (CVE-2025-68943)

nvd.nist.gov (CVE-2025-68943)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.