Threats tagged 'ghsa-h457-956r-2pr8'

An authorization flaw in the "submitted together" feature of Gerrit from version 2.12 onwards allows an authenticated user with force push rights on a secondary branch to bypass code review and submit code to restricted branches by crafting a submission that matches the "topic" tag of an unapproved change.