Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-69413

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.

Description

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gitea Gitea

Default version status: unaffected

  • 0 to < 1.25.2affected
pkg:golang/code.gitea.io/gitea

References