.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

Vulnerability advisory

GHSA-q47x-6mqq-4w92

Gitea Improper Input Validation

Published Feb 15, 2022Updated Aug 21, 2024OSV record ↗

Also known as CVE-2019-11228GO-2022-0862

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected versions

github.com/go-gitea/gitea Go

All github.com/go-gitea/gitea advisories →

Affected	Fixed in
All versions before 1.7.6	`1.7.6`

Description

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.

Specific Go Packages Affected

github.com/go-gitea/gitea/models

References