CVE-2026-58420

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-58420

The Git repository management system Gitea is vulnerable to Local File Inclusion (LFI) via the file:// URI in the Migration Restore functionality. The issue originates from the *GiteaLocalUploader.CreateReleases() function within the services/migrations/gitea_uploader.go file. This vulnerability ...

CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore

Local File Inclusion via file:// URI in Migration Restore...

CVE-2026-58420

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:32+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-5ggr-2f2h-jmvm...