ID:5622 - Exploit for Input validation error in Gitea - CVE-2019-11229

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:5622 - Exploit for Input validation error in Gitea - CVE-2019-11229

ID:5622 - Exploit for Input validation error in Gitea - CVE-2019-11229

Published: June 17, 2021


Vulnerability identifier: #VU31113
Vulnerability risk: High
CVE-ID: CVE-2019-11229
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Gitea

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.


Remediation

Install update from vendor's website.