high7.5
CVE-2019-11228
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.
Impact
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitea | Gitea | before 1.7.6 Version 1.8.0 |