PT-2019-12202 · Go Gitea+1 · Gitea+1

CVE-2019-11228

·

Publicado

2019-04-13

·

Atualizado

2024-08-21

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Gitea versions 1.7.0 through 1.7.6 Gitea versions 1.8.0 through 1.8-RC2
Description The issue arises from improper input validation in the form.MirrorAddress before calling the SaveAddress function. This lack of validation can lead to potential security issues.
Recommendations For Gitea versions 1.7.0 through 1.7.6, update to version 1.7.6 or later. For Gitea versions 1.8.0 through 1.8-RC2, update to version 1.8-RC3 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-1639
CVE-2019-11228
GHSA-Q47X-6MQQ-4W92
GO-2022-0862

Produtos afetados

Alt Linux
Gitea