Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-69413

Good to know:

icon

Date: December 31, 2025

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.

Severity Score

Related Resources (9)

https://github.com/advisories/GHSA-pc73-rj2c-wvf9
https://blog.gitea.com/release-of-1.25.2/
https://github.com/go-gitea/gitea/pull/36002
https://nvd.nist.gov/vuln/detail/CVE-2025-69413
https://github.com/go-gitea/gitea/issues/35984
https://github.com/go-gitea/gitea/releases/tag/v1.25.2
https://blog.gitea.com/release-of-1.25.2
https://github.com/go-gitea/gitea
https://www.mend.io/vulnerability-database/CVE-2025-69413

Severity Score

Weakness Type (CWE)

Observable Response Discrepancy

CWE-204

Top Fix

icon

Upgrade Version

Upgrade to version github.com/go-gitea/gitea - v1.26.0-dev.0.20251125041330-abe2755f7aaa;code.gitea.io/gitea - v1.25.2;https://github.com/go-gitea/gitea.git - v1.25.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us