[PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission

Disclosed: 2024-01-03 22:49:59 By archangel To github
Medium
Vulnerability Details
No vulnerability description provided or it is restricted.
Actions
View on HackerOne
Report Stats
  • Report ID: 2209433
  • State: Closed
  • Substate: resolved
  • Upvotes: 24
Share this report