6 matches found
The vulnerability lies in the CreateAccessToken() function in the routers/api/v1/user/app.go file, and the reqBasicOrRevProxyAuth() function in the routers/api/v1/api.go file of the Git repository management system Gitea. This vulnerability allows a hacker to escalate their privileges.
The vulnerability of the CreateAccessToken function in the routers/api/v1/user/app.go file and the reqBasicOrRevProxyAuth function in the routers/api/v1/api.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...