CVE-2026-26231

8.5 Élevée

Publiée le 03/07/2026 à 23:16 · Modifiée le 07/07/2026 à 20:16 · Analyse NVD reportée · Source : 88ee5874-cf24-4952-aea0-31affedb7ff2

Description

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.

Traduire en français

Produits concernés

Gitea Open Source Git Server

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.5 Élevée	88ee5874-cf24-4952-aea0-31affedb7ff2	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N`

Faiblesses (CWE)

CWE-863

Références

https://blog.gitea.com/release-of-1.26.2/
https://github.com/go-gitea/gitea/pull/37479
https://github.com/go-gitea/gitea/pull/37484
https://github.com/go-gitea/gitea/releases/tag/v1.26.2
https://github.com/go-gitea/gitea/security/advisories/GHSA-mm7c-rhg6-qr4r
https://github.com/go-gitea/gitea/security/advisories/GHSA-mm7c-rhg6-qr4r

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories