An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafte
// analyst note
This briefing summarises reporting from The Hacker News. 90@! Ltd curates and rewrites third-party cybersecurity reporting for UK defenders. For the full technical write-up, read the original source.
Curated by 90@! Ltd from The Hacker News. Read the original for full technical detail.
Read original at The Hacker News// 90@! Ltd
90@! Ltd is a UK applications and cybersecurity consultancy. We help teams triage, remediate, and harden against emerging threats like this one.
Start an engagement