CVE-2023-49947

概要

参考情報

• codeberg.org/forgejo/forgejo/commit/44df78edd40076b349d50dc5fb02af417a44cfab · Patch
• forgejo.org/2023-11-release-v1-20-5-1 · Release Notes

forgejo のその他の脆弱性

• CVE-2023-49948中 5.3Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) …
• CVE-2023-49946緊急 9.1In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked…