CVE-2019-11228 - repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress

HIGH

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress

Published Apr 13, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.35%

repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.

Ecosystem	Package	Introduced	Fixed
Go	github.com/go-gitea/gitea	0	1.7.6

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
https://github.com/advisories/GHSA-q47x-6mqq-4w92		Advisory
https://github.com/go-gitea/gitea/pull/6593
https://github.com/go-gitea/gitea/pull/6595
https://github.com/go-gitea/gitea/releases/tag/v1.7.6		x_refsource_MISCPatchRelease NotesThird Party Advisory
https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3		x_refsource_MISCPatchRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11228