The updated CVE description states that Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent‑encoded backslashes in redirect_to values. Based on the revised description, an attacker can supply such backslashes to create a redirect to an arbitrary URL, enabling an open redirect. This flaw matches CWE‑601, an open redirect weakness.

The affected product is Gitea Open Source Git Server, versions up to and including 1.25.4. Version 1.25.5 and later contain the fix, so deployments running earlier releases are vulnerable.

Based on the updated description, an attacker only needs to send a crafted HTTP request containing a redirect_to value with backslashes to trigger the vulnerability; the server then redirects users to attacker‑controlled URL. The CVSS score of 6.1, EPSS score of < 1%, and the fact that it is not listed in CISA KEV indicate the risk is moderate and exploitation in the wild is unlikely. The open redirect risk can be leveraged for phishing or malicious navigation against user‑facing deployments.