PUBLISHED
2026-07-03 21:16
MODIFIED
2026-07-03 21:16
EPSS (Prob. Exploit)
0.56%
Top 53.2%
> DESCRIPTION
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-59: Improper Link Resolution Before File Access - The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
> GITHUB SECURITY ADVISORY
GHSA-h697-89cp-24q8
CRITICAL
Gitea template repository generation follows unsafe filesystem paths
AFFECTED PACKAGES:
GO / code.gitea.io/gitea
< 1.25.5
Fixed in: 1.25.5
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Gitea template repository generation mishandles symlinked paths
AFFECTED PACKAGES:
Unknown / Unknown
44 versions affected
ALIASES:
GHSA-h697-89cp-24q8, GO-2026-6340
> HISTORIQUE DES MODIFICATIONS
Première apparition
03/07/2026 21:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-59: Improper Link Resolution Before File Access ('Link Following') - The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a ...
Nouvelle valeur:
CWE-59: Improper Link Resolution Before File Access - The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut th...
📊
ENRICHISSEMENT
01/08/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-59: Improper Link Resolution Before File Access ('Link Following') - The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a ...
Total des modifications: 2
Dernière mise à jour: 5 days ago