Gitea GetActionsUserRepoPermission Heap Buffer Overflow

The vulnerability of the GetActionsUserRepoPermission function in the models/perm/access/repopermission.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the GetActionsUserRepoPermission function. An attacker can gain unauthorized read access to the contents of a private repository by exploiting a missing permission check when a collaborative owner is configur...