GitHub Advisoryadvisory · Go

GHSA-q47x-6mqq-4w92 Gitea Improper Input Validation

HIGH Published 2022-02-15 Modified 2023-10-02 Official page ↗
Aliases
CVE-2019-11228
Ecosystem
Go
Packages
github.com/go-gitea/gitea
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20
Reviewed
2021-05-12

Affected packages

• Go github.com/go-gitea/gitea: < 1.7.6 → fixed in 1.7.6

Description

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the `form.MirrorAddress` before calling `SaveAddress`. Specific Go Packages Affected github.com/go-gitea/gitea/models

Related

Alias · CVE (1)

  • CVE-2019-11228 repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References