Andrew Shadura

A cross-site request forgery (CSRF) issue exists. This allows an attacker to perform unintended actions on a user's account.

The issue allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.

The issue allows remote attackers to bypass CSRF protection by utilizing the GET HTTP request method.

The issue allows remote authenticated users to obtain sensitive information, including API keys, by utilizing the "get repo" API method.