Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization.CreditsspingARborReferenceshttps://github.com/go-gitea/gitea/security/advisories/GHSA-h4fh-pc4w-8w27https://github.com/go-gitea/gitea/pull/36318https://github.com/go-gitea/gitea/pull/36373https://github.com/go-gitea/gitea/releases/tag/v1.25.4https://blog.gitea.com/release-of-1.25.4/
