lei.chen/myxce
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(buglog): record Gitea sync for bug-1958..bug-1966

Browse source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Rongsong Shen 2026-10-10 10:20:18 +00:00
parent 7b77ce9c1d
commit c71049f28d
Signed by untrusted user: rshen
GPG key ID: 80533536B0EB651C
10 changed files with 54 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.wolf/bugs/bug-1958.md
View file

@ -11,6 +11,9 @@ occurrences: 1
files: ["src/frontend/apiserver/controllers/roles.go"]
tags: ["apiserver", "security", "rbac"]
related: ["bug-1952"]
gitea_issue: 389
gitea_synced_status: "open"
gitea_synced_hash: "499c8864257a"
---
# bug-1958: apiserver lets any rbac:control grant create roles and extend its own role (privilege escalation)