The avatar middleware in Gitea prior to 1.13.6 allows Directory Traversal via a crafted URL.
gitea gitea