Threats tagged 'ghsa-gx58-cw96-3j3q'

Forgejo versions through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 have a path traversal vulnerability in the restore-repo feature. This flaw allows attackers to read files outside the intended dump directory by supplying crafted asset paths containing '../' sequences. Specifically, attackers can manipulate the release.yml file's DownloadURL or PatchURL to import arbitrary files as release attachments during repository restoration.