CVE-2023-49948

by Fred · 03/12/2023

Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.

Date published : 2023-12-03