Administrator escalation via control-character injection

Privilege escalation in Gitblit 1.9.2 allows remote authenticated users to grant themselves administrator access through profile edits. StoredUserConfig writes profile values into users.conf without escaping newline and tab characters, so injected lines are parsed as configuration entries. The default Config User Service is exposed after login, and a normal account can add an administrator role to itself and obtain full repository and user-management access.