2 matches found
CVE-2022-40308
If anonymous read enabled, it's possible to read the database file directly without logging in.
CVE-2022-40309
Users with write permissions to a repository can delete arbitrary directories.