id: GO-2022-0846
modules:
    - module: github.com/go-gitea/gitea
      versions:
        - fixed: 1.7.6
      vulnerable_at: 1.7.5
summary: Gitea Remote Code Execution in github.com/go-gitea/gitea
cves:
    - CVE-2019-11229
ghsas:
    - GHSA-hpmr-prr2-cqc4
references:
    - advisory: https://github.com/advisories/GHSA-hpmr-prr2-cqc4
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-11229
    - fix: https://github.com/go-gitea/gitea/pull/6593
    - fix: https://github.com/go-gitea/gitea/pull/6595
    - web: http://packetstormsecurity.com/files/160833/Gitea-1.7.5-Remote-Code-Execution.html
    - web: https://github.com/go-gitea/gitea/releases/tag/v1.7.6
    - web: https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3
    - web: https://www.exploit-db.com/exploits/49383
source:
    id: GHSA-hpmr-prr2-cqc4
    created: 2024-08-20T14:22:11.315149-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE