Lucene search
PRIOn knowledge basePRION:CVE-2023-49946HistoryDec 03, 2023 - 7:15 p.m.
Code injection
2023-12-0319:15:00
PRIOn knowledge base
www.prio-n.com
2
code injection
forgejo
unauthorized actions
vulnerability
nvd
In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This allows remote attackers to read private issues, read private pull requests, delete issues, and perform other unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| forgejo | eq | < 1.20.5-1 |
Related
cvelist
cvelist
CVE-2023-49946
2023-12-03 00:00:00
nvd
nvd
CVE-2023-49946
2023-12-03 19:15:08
cve
cve
CVE-2023-49946
2023-12-03 19:15:08
veracode
veracode
Improper Access Control
2023-12-04 07:08:11
gitlab
gitlab
Incorrect Permission Assignment for Critical Resource
2023-12-03 00:00:00