Gitea Improper Input Validation

GHSA-q47x-6mqq-4w92 · CVE-2019-11228 · GO-2022-0862

Published Feb 15, 2022 · Modified Aug 21, 2024

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.

Specific Go Packages Affected

github.com/go-gitea/gitea/models

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-11228
WEB https://github.com/go-gitea/gitea/pull/6593
WEB https://github.com/go-gitea/gitea/pull/6595
WEB https://github.com/go-gitea/gitea/releases/tag/v1.7.6
WEB https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes