medium5.3
CVE-2021-29134
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.
Impact
The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitea | Gitea | before 1.13.6 |