Описание
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
EPSS
Процентиль: 19%
0.00268
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 5.9
github
около 1 месяца назад
Gitea: draft release attachment disclosure via missing web authorization
EPSS
Процентиль: 19%
0.00268
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-200