CVE-2022-38183

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.16.9

Description The issue is related to improper access controls in Gitea, allowing an attacker to assign any issue to any project. This results in the attacker gaining access to private issue titles due to the lack of permission checks for fetching issues.

Recommendations For versions prior to 1.16.9, update to version 1.16.9 or later to resolve the issue. As a temporary workaround, consider restricting access to project issue assignment until the update is applied.