Gitea, the selfhosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attackercontrolled patch content into a live Git hook and run shell commands as the Gitea service account. Tracked as CVE202660004 CVSS score 9.8, the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity