[PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission

Summary

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read permissions. CVE-2023-51379