Yoojoon2

Recursive remote-to-local SFTP copies in the `SFTPClient. copy()` function within asyncssh/sftp.py, accessible via `get()`, `mget()`, and `copy()`, trust filenames provided by a remote server's directory enumeration. A compromised or malicious SFTP server can return absolute filenames or filenames containing path separators and parent-directory traversal. This allows the destination path construction to escape the intended local directory, enabling the server to write arbitrary content to any location writable by the client process.

A path traversal issue exists in the CDB list handlers within the `get lists()` and `delete list file()` functions. This allows compromised cluster workers to read or delete master files by sending traversal or absolute-path filenames through the internal cluster RPC path, which bypasses REST validation and Role-Based Access Control (RBAC). An example of a targetable file is `rbac.db`.

The web GUI allows the specification of custom column types for tables. When the URL type is used, the system forms a clickable link from the cell value. Because the code does not restrict the allowed URL schemes, an attacker can use a JavaScript scheme to execute a Cross-Site Scripting (XSS) attack, which occurs when malicious scripts are injected into trusted websites.

The `restore-repo` CLI command fails to properly validate the `Head.CloneURL` field when parsing `pull request.yml` from a repository dump. The safety check function `CheckAndEnsureSafePR()` is called with an empty `commonCloneBaseURL` variable, which effectively disables the validation. This allows a malicious dump file to force the Gitea server to execute a `git fetch` command against an attacker-specified URL. This can lead to Server-Side Request Forgery (SSRF) against internal services or cloud metadata endpoints, or the disclosure of local git repositories using the `file://` protocol.