Gitea handleOAuth2SignIn OAuth2 Bypass

The vulnerability of the handleOAuth2SignIn function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protecte...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the handleOAuth2SignIn. An attacker can regain access to a previously deactivated account by signing in through an OAuth2 authentication source that does not issue refresh tokens. This allows the attacker...