[CVE-2026-25718] Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowi…

Descripción técnica

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Debilidades (CWE)

CWE-59

Fuente oficial

Publicado en NIST NVD.