Tag
OpenCSG CSGHub version 2.6.0-ce and earlier contains an authorization bypass vulnerability allowing remote, unauthenticated attackers to retrieve private repository files by injecting a malicious current_user parameter.