Skip to content
Threat Feed
Subscribe

Product

Gitea (< 1.27.0)

1 brief RSS
critical advisory

Gitea Branch Protection Bypass via Pull Request Retargeting

An attacker with write access to a Gitea repository can bypass branch protection rules by exploiting a logic flaw, obtaining an 'official' approval on a pull request (PR) targeting an unprotected branch, then retargeting the PR to a protected branch, preserving the stale approval and leading to unauthorized code merges and privilege escalation.

Gitea branch-protection-bypass code-repository privilege-escalation persistence web-application vulnerability defense-evasion network +7
1r 7t