Gitea 1.27.0 Diffpatch Git Hook Remote Code Execution

Gitea versions 1.17.0 through 1.27.0 contain a diffpatch API flaw that enables repository writers to install and execute a Git hook as the service account. This proof of concept demonstrates the issue. https://packetstorm.news/download/238912...