Описание
Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets.
EPSS
Процентиль: 23%
0.00305
Низкий
8.1 High
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 8.1
redhat
около 1 месяца назад
Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets.
CVSS3: 8.1
debian
около 1 месяца назад
Gitea versions before 1.26.0 allow API users to fork a repository into ...
CVSS3: 8.1
github
2 месяца назад
Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration
EPSS
Процентиль: 23%
0.00305
Низкий
8.1 High
CVSS3
Дефекты
CWE-284