Threats tagged 'ghsa-6773-qqrh-gh33'

A vulnerability exists where users with Viewer or Editor roles can bypass folder permissions on Git Sync managed resources via the repository files API. Viewers can read files in folders they should not access, while Editors can create, modify, move, or delete provisioned dashboards and folders without proper authorization. This is an incorrect authorization issue affecting confidentiality and integrity.