IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-08-13 17:17

MODIFIED

2026-08-13 17:17

EPSS (Prob. Exploit)

0.51%

Top 56.6%

DATA SOURCES:

NVD 🔗 2026-08-13 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-10-26

> DESCRIPTION

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-862

> CWE DETAILED DESCRIPTIONS

CWE-862: Missing Authorization - The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

AFFECTED PACKAGES:

Unknown / Unknown

38 versions affected

ALIASES:

GHSA-m6qc-j894-7h9r

> HISTORIQUE DES MODIFICATIONS

Première apparition

13/08/2026 17:17

Source: NVD

📊 ENRICHISSEMENT 01/09/2026 06:02

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-862: Missing Authorization - The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://blog.gitea.com/gitea-1.27.0-is-released/

https://github.com/go-gitea/gitea/releases/tag/v1.27.0

https://github.com/go-gitea/gitea/security/advisories/GHSA-m6qc-j894-7h9r