The vulnerability lies in the CreateAccessToken() function in the routers/api/v1/user/app.go file, and the reqBasicOrRevProxyAuth() function in the routers/api/v1/api.go file of the Git repository management system Gitea. This vulnerability allows a hacker to escalate their privileges.

The vulnerability of the CreateAccessToken function in the routers/api/v1/user/app.go file and the reqBasicOrRevProxyAuth function in the routers/api/v1/api.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a...