CVE-2021-29134

The CVE-2021-29134 entry relates to Gitea prior to v1.13.6, where the avatar middleware is susceptible to Directory Traversal via a crafted URL. Affected component: avatar middleware in Gitea; root cause: improper handling of path components enables traversal to arbitrary files. Impact: potential...