GHSA-q47x-6mqq-4w92HighCVSS 7.5

Gitea Improper Input Validation

Published
February 15, 2022
Last Modified
October 2, 2023

🔗 CVE IDs covered (1)

CVE-2019-11228 →

📋 Description

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.

Specific Go Packages Affected

github.com/go-gitea/gitea/models

🎯 Affected products1

  • go/github.com/go-gitea/gitea:< 1.7.6

🔗 References (6)