Gitea · Gitea · CVE-2021-3382
Name of the Vulnerable Software and Affected Versions:
gitea versions 1.9.0 through 1.13.1
Description:
The issue is a stack buffer overflow vulnerability that allows remote attackers to cause a denial of service, resulting in a crash, via vectors related to a file path.
Recommendations:
For gitea versions 1.9.0 through 1.13.1, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting access to file paths that could be used to exploit this vulnerability until a patch is available.