Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•4 views

CVE-2026-58443: Incorrect Authorization

Public-only repository tokens can update private PR head branches...

9.1CVSS6.6AI score0.00579EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/27 3:32 p.m.•17 views

GO-2026-6086 Gitea: Public-only repository tokens can update private PR head branches in gitea.dev

Gitea: Public-only repository tokens can update private PR head branches in gitea.dev...

9.1CVSS6.6AI score0.00579EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•11 views

PT-2026-65383

Gitea: Public-only repository tokens can update private PR head branches in gitea.dev...

5.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 11:19 a.m.•16 views

CVE-2021-22863

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...

8.1CVSS6.8AI score0.01003EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/03 4:15 a.m.•18 views

CVE-2021-22863

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...

8.1CVSS5.8AI score0.01003EPSS
SaveExploits0References4
NVD
NVD
•added 2021/03/03 4:15 a.m.•46 views

CVE-2021-22863

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...

8.1CVSS0.01003EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/03/03 3:25 a.m.•52 views

CVE-2021-22863 Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...

8.2AI score0.01003EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•18 views

PT-2021-15236 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 2.12.22 through 2.20.23 GitHub Enterprise Server versions 2.21.0 through 2.21.14 GitHub Enterprise Server versions 2.22.0 through 2.22.6 GitHub Enterprise Server versions 3.0.0 Description: An improper access...

8.1CVSS8AI score0.01003EPSS
SaveExploits0References7
Rows per page
Query Builder