Skip to content
OpenAdvisories

Archive

13 April 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • High 8.1
    CVE-2019-11229 Public exploit EPSS 55%

    Gitea Remote Code Execution

    models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.

  • High 7.5

    Gitea Improper Input Validation

    repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.