CVE-2021-29134

CVE-2021-29134

The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.

Source: CVE-2021-29134