CVE-2023-24828

Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing normal users (or everyone if it allows self-registration) may exploit this to elevate privilege to obtain administrator permission. This issue is has been addressed in version 7.9.12. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-338

• https://github.com/theonedev/onedev/commit/d67dd9686897fe5e4ab881d749464aa7c06a68e5Patch, Third Party Advisory
• https://github.com/theonedev/onedev/security/advisories/GHSA-jf5c-9r77-3j5jThird Party Advisory
• https://github.com/theonedev/onedev/commit/d67dd9686897fe5e4ab881d749464aa7c06a68e5Patch, Third Party Advisory
• https://github.com/theonedev/onedev/security/advisories/GHSA-jf5c-9r77-3j5jThird Party Advisory

Published

Feb 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24822RIOT-OS, an operating system that supports Internet of Thing…7.5
• CVE-2023-24823RIOT-OS, an operating system that supports Internet of Thing…9.8
• CVE-2023-24824cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5
• CVE-2023-24825RIOT-OS, an operating system for Internet of Things (IoT) de…7.5
• CVE-2023-24826RIOT-OS, an operating system for Internet of Things (IoT) de…7.5
• CVE-2023-24827syft is a a CLI tool and Go library for generating a Softwar…7.5
• CVE-2023-24829Incorrect Authorization vulnerability in Apache Software Fou…8.8
• CVE-2023-2483Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-24830Improper Authentication vulnerability in Apache Software Fou…7.5
• CVE-2023-24831Improper Authentication vulnerability in Apache Software Fou…9.8
• CVE-2023-24832A null pointer dereference bug in Hermes prior to commit 5ca…7.5
• CVE-2023-24833A use-after-free in BigIntPrimitive addition in Hermes prior…7.5