Zurück zur CVE-Übersicht

CVE-2026-26232

NONE

Risk Signal Score5/100 — NIEDRIG

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

Beschreibung

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

Referenzen