OneDev
Dashboards
Projects
Global Views
Code Search
server
Overview
Code
Pull Requests
Issues
List
Boards
Iterations
Builds
Packages
Statistics
OneDev 16.5.12
Documentation Support & Bug Report RESTful API Incompatibilities License Agreement Check Update
Projects onedev server onedev/server Issues OD-3076
User with package write permission may be able to read arbitrary files on server #3076
Robin Shen opened 5 days ago
No description
  • Robin Shen changed confidential 5 days ago
    Previous Value Current Value 
    false
    		 
    true
  • OneDev commented 5 days ago

    State changed as build OD-8348 (16.5.10) is successful

    Copy
  • OneDev changed state to 'Closed' 5 days ago
    Previous Value Current Value 
    Open
    		 
    Closed
  • Robin Shen changed confidential 5 days ago
    Previous Value Current Value 
    true
    		 
    false
1/1
Type
Security Vulnerability
Priority
Major
Assignee
Robin Shen
Labels
No labels
Issue Votes (0)
Login to vote
Watchers (2)
Reference
OD-3076
Please wait...
Connection lost or session expired, reload to recover
Page is in error, reload to recover