Missing Authorization

Woodpecker is vulnerable to Missing Authorization. The vulnerability is due to accepting user-controlled backendoptions.kubernetes.serviceAccountName values without authorization checks, which allows an attacker with push access to run pipeline pods under arbitrary Kubernetes ServiceAccounts and...