1 matches found
Improper handling of untrusted branches in gitea
Multibranch pipelines are typically configured so that only committers to the repository are able to effectively propose changes to Jenkinsfiles. Changes to Jenkinsfiles in pull requests created by other users would not be trusted, and the target branch's Jenkinsfile content is used instead. gite...
7.5CVSS7.3AI score0.02135EPSS
SaveExploits0Affected Software1
20