4 matches found
CVE-2019-11228
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress...
7.5CVSS6.8AI score0.01349EPSS
SaveExploits0References1
Gitea Improper Input Validation
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress. Specific Go Packages Affected github.com/go-gitea/gitea/models...
7.5CVSS7.3AI score0.01349EPSS
SaveExploits0References6Affected Software1
Remote Code Execution (RCE)
github.com/go-gitea/gitea is vulnerable to remote code execution RCE attacks. The vulnerability exists as the value of form.MirrorAddress is not validated, allowing RCE attacks...
7.5CVSS7.9AI score0.01349EPSS
SaveExploits0References6Affected Software1
20