The vulnerability in Gitea allows a user to trigger the server to perform DNS lookups for arbitrary domain names during repository migration. By sending a repository migration request that resolves to multiple DNS answers, an attacker can bypass the server's allow‑list filtering. This enables an attacker to access internal network resources or reveal sensitive server information, which is consistent with CWE‑918 (Server Side Request Forgery) and CWE‑200 (Information Exposure).

The affected product is the Gitea Open Source Git Server. No specific version numbers are listed in the advisory, so any Gitea installation that supports repository migration may be impacted.

The exploit requires only an HTTP request to the migration endpoint, so the attack vector is remote over the network. The CVSS score of 6.5 indicates a medium severity, and the EPSS score of < 1% reflects a very low but non‑zero exploitation probability. The vulnerability is not included in the CISA KEV catalog, so the frequency of real‑world attacks is currently unclear. Given these metrics, administrators should treat it as a moderate risk until a patch is applied.