Vulnerability advisory
BIT-gitea-2025-68946
Also known as CVE-2025-68946GHSA-hq57-c72x-4774GO-2025-4265
Severity
Severity not reported.
Affected versions
gitea Bitnami
| Affected | Fixed in |
|---|---|
| All versions before 1.20.1 | 1.20.1 |
Severity for this package
| |
Description
In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.