CVE-2019-11229

CVE-2019-11229 describes a remote code execution (RCE) vulnerability in Gitea versions prior to 1.7.6 and 1.8.x before 1.8-RC3, stemming from improper handling of mirror repository URL settings. This vulnerability carries a CVSS score of 8.8 (High), indicating that an authenticated attacker can achieve full compromise of confidentiality, integrity, and availability over a network with low attack complexity. While not listed on the KEV catalog, an exploit (EDB-49383) is publicly available, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.