Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/go-gitea/gitea ↗ | |
| All commits before bafa9ff4323cef048412157e5f5a7bc516adf985 | bafa9ff4323cef048412157e5f5a7bc516adf985 |
| 3934d9cd2f46bb5240f3c5dd7e7e3423eaa5c339 through 73ce02400cec659bd7a7ee3798ff73a4c7c85957 | No fix listed |
| Not specified | f64b8eb009dded8be09cbbe4a335311f88c6e525 |
Also listed as affected (20)
| |
Description
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.