CVE-2023-49946

EUVD-2023-53841
In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This allows remote attackers to read private issues, read private pull requests, delete issues, and perform other unauthorized actions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Affected Products (NVD)
VendorProductVersion
forgejoforgejo
𝑥
< 1.20.5-1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://about.gitea.com/security
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md
https://forgejo.org/2023-11-release-v1-20-5-1/
https://github.com/gogs/gogs/security
https://about.gitea.com/security
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md
https://forgejo.org/2023-11-release-v1-20-5-1/
https://github.com/gogs/gogs/security