Threats tagged 'ghsa-5fqg-pfrh-8fj8'

Forgejo versions through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 have an information disclosure vulnerability in the GetPublicKey API handler. This flaw allows authenticated users with read:user tokens or sessions to enumerate sequential key IDs and retrieve titles, fingerprints, and public key material of other users' SSH, deploy, and principal keys. The vulnerability arises due to a missing ownership check on key lookups.