Loading
repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.
Use CWE-20, Gitea vendor hub and Gitea product page to widen CVE-2019-11228 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2026-20912, CVE-2026-20897 and CVE-2026-20750 for nearby disclosures in the same product family.