Threats tagged 'ghsa-p8qg-p5c7-m59c'

OpenCSG CSGHub versions through 2.6.0-ce have an authorization bypass vulnerability in an unauthenticated file resolve route. This flaw allows remote attackers to read private repository files by injecting a percent-encoded current_user parameter into the file path. The portal forwards this request with its server API key, enabling unauthorized access to private model, code, or space repositories.