Go/github.com/go-gitea/gitea CVE-2019-11229: high 8.1, EPSS 54.95%
Gitea Remote Code Execution
Action: Upgrade github.com/go-gitea/gitea to 1.7.6 or later.
go get github.com/go-gitea/gitea@v1.7.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.6 | - |
Fixed versions
| 1.7.6 |
Sources
- osv: GHSA-hpmr-prr2-cqc4
- https://nvd.nist.gov/vuln/detail/CVE-2019-11229
- https://github.com/go-gitea/gitea/pull/6593
- https://github.com/go-gitea/gitea/pull/6595
- https://github.com/go-gitea/gitea/releases/tag/v1.7.6
- https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3
- https://www.exploit-db.com/exploits/49383
- http://packetstormsecurity.com/files/160833/Gitea-1.7.5-Remote-Code-Execution.html
CVE-2019-11229 · published · modified · JSON