Start for Free
MEDIUM 5.3 Go

Path Traversal in Gitea

GHSA-h3q4-vmw4-cpr5 · BIT-gitea-2021-29134 · CVE-2021-29134 · GO-2022-0353

Published · Modified

Description

The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes